high7.8
CVE-2020-12615
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6.
Impact
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beyondtrust | Privilege Management For Windows | before 5.6 Version 5.6 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1
- https://www.beyondtrust.com/trust-center/security-advisories/bt22-07
- https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1
- https://www.beyondtrust.com/trust-center/security-advisories/bt22-07