Riskcovery

CVE-2020-12615

State
Published
Severity
Not scored
Published
Dec 12, 2023
Updated
Aug 28, 2024
Reserved
May 1, 2020

Read the record on cve.org

Description

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-269 Improper Privilege Management

Affected Products

ProductVersions
n/an/a
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.