CVE-2020-12615

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6

published December 12, 2023

CVSS
—
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Published
2023-12-12T00:00Z
EPSS history
Timeline
  • 12 DEC 00:00Z
    An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6
    cvelistv5