CVE-2020-12615 | BDVDB-2026-218952 Detail

Description#

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-269 Improper Privilege Management

References#

https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1
https://www.beyondtrust.com/trust-center/security-advisories/bt22-07

Exploit#

No public exploit known

History#

Version 12023-12-12Record published in the CVE List.
Version 22024-08-28Most recent update recorded in the CVE List.