Fortra Patches Critical Vulnerabilities in BoKS

Fortra's BoKS Privileged Access Manager contained three critical vulnerabilities — including an authentication bypass caused by predictable password generation for Active Directory service accounts, a command injection flaw, and a stack buffer overflow — any of which could grant an attacker root-level access or full authentication bypass. The root cause spans poor cryptographic design choices, insufficient input validation, and unsafe memory handling in a product that is specifically trusted to guard privileged access. This is especially dangerous because PAM solutions sit at the heart of an organization's access control architecture; compromising them can cascade into a full domain or infrastructure takeover. Organizations must prioritize patching PAM and other privileged infrastructure tools at the same urgency level as perimeter devices.