CVE-2020-12614: High severity beyondtrust privilege management vulnerability
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is protected by this criteria, it can be leveraged by a malicious actor to achieve Elevation of Privileges from standard user to administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12614?
CVE-2020-12614 is rated as a moderate-severity vulnerability due to its potential impact on administrative token protection.
How do I fix CVE-2020-12614?
To fix CVE-2020-12614, update BeyondTrust Privilege Management for Windows to the latest version beyond 5.6.
What systems are affected by CVE-2020-12614?
CVE-2020-12614 affects BeyondTrust Privilege Management for Windows version 5.6 and earlier.
Is CVE-2020-12614 a remote exploit?
CVE-2020-12614 does not involve a remote exploit as it requires administrative privileges to trigger.
What type of vulnerability is CVE-2020-12614?
CVE-2020-12614 is considered a privilege escalation vulnerability.