CVE-2020-12615: High severity beyondtrust privilege management vulnerability
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12615?
CVE-2020-12615 has a high severity rating due to its potential to allow privilege escalation.
How do I fix CVE-2020-12615?
To fix CVE-2020-12615, upgrade BeyondTrust Privilege Management for Windows to version 5.6 or later.
What systems are affected by CVE-2020-12615?
CVE-2020-12615 specifically affects BeyondTrust Privilege Management for Windows version 5.6 and prior.
Can CVE-2020-12615 be exploited remotely?
CVE-2020-12615 requires local access to the system to exploit the vulnerability.
What are the risks associated with CVE-2020-12615?
The main risk of CVE-2020-12615 is that attackers can gain unauthorized privileges on affected systems.