← back
CVE-2020-12615

CVE-2020-12615

EPSS 0.2%CWE-269
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Dec 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.
Affected products
n/a · n/a
References
https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1https://www.beyondtrust.com/trust-center/security-advisories/bt22-07