// For flags

CVE-2020-12613

 

Severity Score

8.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker can spawn a process with multiple users as part of the security token (prior to Avecto elevation). When Avecto elevates the process, it removes the user who is launching the process, but not the second user. Therefore this second user still retains access and can give permission to the process back to the first user.

Se descubrió un problema en BeyondTrust Privilege Management para Windows hasta 5.6. Un atacante puede generar un proceso con múltiples usuarios como parte del token de seguridad (antes de la elevación de Avecto). Cuando Avecto eleva el proceso, elimina al usuario que inicia el proceso, pero no al segundo usuario. Por lo tanto, este segundo usuario aún conserva el acceso y puede otorgar permiso para el proceso al primer usuario.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2020-05-01 CVE Reserved
  • 2023-12-11 CVE Published
  • 2024-08-04 CVE Updated
  • 2024-11-10 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Beyondtrust
Search vendor "Beyondtrust"
 Privilege Management For Windows
Search vendor "Beyondtrust" for product "Privilege Management For Windows"
 <= 5.6
Search vendor "Beyondtrust" for product "Privilege Management For Windows" and version " <= 5.6"
-
Affected