CVE-2020-12614 - CVE House
Back to Database
Status published Unknown CVE-2020-12614

An issue was discovered in BeyondTrust Privilege Management for Windows...

Vulnerability Description

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is protected by this criteria, it can be leveraged by a malicious actor to achieve Elevation of Privileges from standard user to administrator.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12614

Credits & Attribution

No credits recorded in the NVD database.

References

More from beyondtrust

View All →
CVE-2021-42254
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary...
High 7.8
CVE-2021-3187
An issue was discovered in BeyondTrust Privilege Management for Mac...
Unknown 0
CVE-2021-31589
A cross-site scripting (XSS) vulnerability has been reported and confirmed...
Medium 6.1
CVE-2020-9326
BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly...
High 7.5
CVE-2020-28369
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7,...
High 7.8

Affected Vendor

beyondtrust

View all reports →

Affected Software

privilege management for windows
Vulnerable Versions:
0

Timeline

Official Publish: December 12th, 2023
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.