Privilege Escalation in BeyondTrust Privilege Management for Windows

CVE-2020-12613

What is CVE-2020-12613?

An issue in BeyondTrust Privilege Management for Windows allows an attacker to spawn a process where two users can have conflicting security tokens. The vulnerability occurs during the elevation of processes, where the original user is removed from the token while the secondary user remains, granting them the ability to manipulate permissions. This flaw can lead to unauthorized access and potential exploitation of system resources by malicious actors.

References