An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is protected by this criteria, it can be leveraged by a malicious actor to achieve Elevation of Privileges from standard user to administrator.
oryginał ENCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HBeyondtrust Privilege Management For Windows
APPBeyondtrust≤ 5.6
Powiązane podatności
Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint servi...
Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitim...
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for...
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin...
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program...