PT-2023-11471 · Beyondtrust · Beyondtrust Privilege Management For Windows

Published 2023-12-12 · Updated 2024-08-28 · CVE-2020-12615

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BeyondTrust Privilege Management for Windows versions through 5.6

Description An issue was discovered in BeyondTrust Privilege Management for Windows. When adding the Add Admin token to a process and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.

Recommendations For versions through 5.6, consider restricting the use of the Add Admin token to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-12615

Affected Products

Beyondtrust Privilege Management For Windows

References · 6

• https://beyondtrust.com/trust-center/security-advisories/bt22-07 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12615 · Security Note
• https://osv.dev/vulnerability/CVE-2020-12615 · Vendor Advisory
• https://t.me/cvenotify/92518 · Telegram Post
• https://t.me/cvenotify/63288 · Telegram Post
• https://beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1 · Note