Privilege Escalation Vulnerability in BeyondTrust Privilege Management for Windows

CVE-2020-12614

What is CVE-2020-12614?

A vulnerability has been identified in BeyondTrust Privilege Management for Windows, where a specific configuration allows a malicious actor to exploit the publisher criteria for Add Admin tokens. This flaw enables unauthorized users to elevate their privileges from standard user to administrator level by manipulating the publisher name in the security certificate. Proper validation of the publisher and certificate is crucial to prevent potential privilege escalation attacks.

References