In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HBeyondtrust Privilege Management For Windows
APPBeyondtrust≤ 5.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2025-6250HIGH7.1ten sam produkt
Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint servi...
CVE-2025-2297HIGH7.2ten sam produkt
Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitim...
CVE-2025-0889HIGH7.2ten sam produkt
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for...
CVE-2020-12614HIGH7.8ten sam produkt
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria...
CVE-2020-12612HIGH7.8ten sam produkt
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program...