PT-2023-11470 · Beyondtrust · Beyondtrust Privilege Management For Windows

Published 2023-12-12 · Updated 2024-08-01 · CVE-2020-12614

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BeyondTrust Privilege Management for Windows versions through 5.6

Description An issue was discovered where the publisher criteria can be leveraged by a malicious actor to achieve Elevation of Privileges from standard user to administrator. This occurs when the publisher criteria is selected, defining the name of a publisher that must be present in the certificate, and also requires that the certificate is valid. If an Add Admin token is protected by this criteria, it can be exploited.

Recommendations For versions through 5.6, consider disabling the publisher criteria feature until a patch is available to prevent potential Elevation of Privileges attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2020-12614

Affected Products

Beyondtrust Privilege Management For Windows

References · 5

• https://osv.dev/vulnerability/CVE-2020-12614 · Vendor Advisory
• https://beyondtrust.com/trust-center/security-advisories/bt22-10 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12614 · Security Note
• https://twitter.com/CVEnew/status/1734581598056534438 · Twitter Post
• https://beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1 · Note