What is the severity of CVE-2024-1591?

CVE-2024-1591 is classified as having a medium severity due to the potential for local authenticated attackers to exploit the vulnerability.

How do I fix CVE-2024-1591?

To fix CVE-2024-1591, upgrade BeyondTrust Privilege Management for Windows to version 24.1 or later.

Who is affected by CVE-2024-1591?

CVE-2024-1591 affects users of BeyondTrust Privilege Management for Windows versions prior to 24.1.

What type of attacker can exploit CVE-2024-1591?

CVE-2024-1591 can be exploited by local authenticated attackers.

What can be accessed by exploiting CVE-2024-1591?

Exploiting CVE-2024-1591 allows attackers to view Sysvol and potentially identify configuration issues.

Vulnerability/
CVE-2024-1591

low

3.3

CWE

200

16/2/2024

7/2/2025

CVE-2024-1591: Privilege Management for Windows < 24.1 Information Leak

First published: Fri Feb 16 2024(Updated: )

Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy. This allows them to view the policy and potentially find configuration issues.

Credit: 13061848-ea10-403d-bd75-c83a022c2891

Affected Software	Affected Version	How to fix
BeyondTrust Privilege Management for Windows	<24.1
BeyondTrust Privilege Management for Windows	<24.1

Never miss a vulnerability like this again

Reference Links

https://www.beyondtrust.com/trust-center/security-advisories/bt24-02

Frequently Asked Questions

What is the severity of CVE-2024-1591?
CVE-2024-1591 is classified as having a medium severity due to the potential for local authenticated attackers to exploit the vulnerability.
How do I fix CVE-2024-1591?
To fix CVE-2024-1591, upgrade BeyondTrust Privilege Management for Windows to version 24.1 or later.
Who is affected by CVE-2024-1591?
CVE-2024-1591 affects users of BeyondTrust Privilege Management for Windows versions prior to 24.1.
What type of attacker can exploit CVE-2024-1591?
CVE-2024-1591 can be exploited by local authenticated attackers.
What can be accessed by exploiting CVE-2024-1591?
Exploiting CVE-2024-1591 allows attackers to view Sysvol and potentially identify configuration issues.

agent/weakness
agent/title
agent/description
agent/references
agent/first-publish-date
agent/type
agent/author
agent/severity
collector/mitre-cve
source/MITRE
agent/source
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/last-modified-date
agent/tags
agent/softwarecombine
agent/event
agent/guess-ai
agent/software-canonical-lookup-request
vendor/beyondtrust
canonical/beyondtrust privilege management for windows
vendor/grouper

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2024-1591?
CVE-2024-1591 is classified as having a medium severity due to the potential for local authenticated attackers to exploit the vulnerability.
How do I fix CVE-2024-1591?
To fix CVE-2024-1591, upgrade BeyondTrust Privilege Management for Windows to version 24.1 or later.
Who is affected by CVE-2024-1591?
CVE-2024-1591 affects users of BeyondTrust Privilege Management for Windows versions prior to 24.1.
What type of attacker can exploit CVE-2024-1591?
CVE-2024-1591 can be exploited by local authenticated attackers.
What can be accessed by exploiting CVE-2024-1591?
Exploiting CVE-2024-1591 allows attackers to view Sysvol and potentially identify configuration issues.