Security Token Vulnerability in BeyondTrust Privilege Management for Windows

CVE-2020-12615

What is CVE-2020-12615?

A vulnerability exists in BeyondTrust Privilege Management for Windows that allows an attacker to exploit a security token when adding the Add Admin token to a process. If the token is specified to run with medium integrity under the user owning the process, it becomes susceptible to theft, letting attackers apply it to arbitrary processes. This flaw may allow unauthorized escalation of privileges, compromising system security.

References