BeyondTrust Secure Remote Access Base Software through 6.0.1 allows an attacker to achieve full admin access to the appliance, by tricking the administrator into creating a new admin account through an XSS/CSRF attack involving a crafted request to the /appliance/users?action=edit endpoint. This cross-site-scripting (XSS) vulnerability occurs when it does not properly sanitize an unauthenticated crafted web request to the server

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-31589
• https://cxsecurity.com/issue/WLB-2022010013
• https://www.beyondtrust.com/docs/release-notes/index.htm
• http://packetstormsecurity.com/files/165408/BeyondTrust-Remote-Support-6.0-Cross-Site-Scripting.html