Back to Database
Status published
High
CVE-2020-12615
An issue was discovered in BeyondTrust Privilege Management for Windows...
Vulnerability Description
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-12615
Credits & Attribution
No credits recorded in the NVD database.
References
More from beyondtrust
View All →CVE-2021-42254
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary...
High
7.8
CVE-2021-3187
An issue was discovered in BeyondTrust Privilege Management for Mac...
Unknown
0
CVE-2021-31589
A cross-site scripting (XSS) vulnerability has been reported and confirmed...
Medium
6.1
CVE-2020-9326
BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly...
High
7.5
CVE-2020-28369
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7,...
High
7.8
Affected Vendor
beyondtrust
View all reports →Affected Software
privilege management for windows
Vulnerable Versions:
0, 5.6
Timeline
Official Publish:
December 12th, 2023
Last Modified:
August 28th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.