PT-2020-20586 · Beyondtrust+1 · Beyondtrust Privilege Management For Mac+2

Published 2020-03-18 · Updated 2021-07-21 · CVE-2020-9326

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BeyondTrust Privilege Management for Windows and Mac versions 5.1 through 5.5 before 5.5 SR1

Description The issue arises from the mishandling of command-line arguments when PowerShell .ps1 file extensions are present, leading to a crash of the DefendpointService.exe process.

Recommendations For versions 5.1 through 5.5 before 5.5 SR1, update to version 5.5 SR1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-9326

Affected Products

Beyondtrust Privilege Management For Mac

Beyondtrust Privilege Management For Windows

Powershell

References · 4

• https://beyondtrust.com/support/changelog/privilege-management-for-windows-5-5-sr1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9326 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9326 · Security Note
• https://t.me/cvenotify/1858 · Telegram Post