CVE-2020-12614
First published: Tue Dec 12 2023(Updated: )
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is protected by this criteria, it can be leveraged by a malicious actor to achieve Elevation of Privileges from standard user to administrator.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| BeyondTrust Privilege Management for Windows and Mac | <=5.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-12614?
CVE-2020-12614 is rated as a moderate-severity vulnerability due to its potential impact on administrative token protection.
How do I fix CVE-2020-12614?
To fix CVE-2020-12614, update BeyondTrust Privilege Management for Windows to the latest version beyond 5.6.
What systems are affected by CVE-2020-12614?
CVE-2020-12614 affects BeyondTrust Privilege Management for Windows version 5.6 and earlier.
Is CVE-2020-12614 a remote exploit?
CVE-2020-12614 does not involve a remote exploit as it requires administrative privileges to trigger.
What type of vulnerability is CVE-2020-12614?
CVE-2020-12614 is considered a privilege escalation vulnerability.
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/description
- agent/weakness
- agent/severity
- agent/softwarecombine
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/beyondtrust
- canonical/beyondtrust privilege management for windows and mac
- version/beyondtrust privilege management for windows and mac/5.6