CNNVD-202506-1909 Information

CNNVD ID

CNNVD-202506-1909

CVE-2025-5309

  • CNNVD Published: 2025-06-16

Description (Chinese)

BeyondTrust Remote Support和BeyondTrust Privileged Remote Access(BeyondTrust PRA)都是美国BeyondTrust公司的产品。BeyondTrust Remote Support是一个适用于 Windows、Mac、Linux、Ios(iPad、iPhone)等的远程桌面访问、服务台和协作软件。BeyondTrust Privileged Remote Access是一款特权远程访问软件。 BeyondTrust Remote Support和BeyondTrust Privileged Remote Access存在安全漏洞,该漏洞源于服务器端模板注入问题,可能导致远程代码执行。

Description (English)

BeyondTrust Remote Support and BeyondTrust Privileged Remote Access are products of BeyondTrust USA. BeyondTrust Remote Support is a remote desktop access, help desk and collaboration software for Windows, Mac, Linux, Los (iPad, iPhone). BeyondTrust Privileged Remote Access is a privileged remote access software. BeyondTrustRemote Support and BeyondTrust Privileged Remote Access has a security loophole, which stems from server-end template injection problems and may lead to remote code execution.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

BeyondTrust

Published

2025-06-16

Last Modified

2026-02-24

References

https://www.beyondtrust.com/trust-center/security-advisories/bt25-04 https://nvd.nist.gov/vuln/detail/CVE-2025-5309 https://access.redhat.com/security/cve/cve-2025-5309

Patch

https://www.beyondtrust.com/trust-center/security-advisories/bt25-04

Share on: