Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.
oryginał ENCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XBeyondtrust Privilege Management For Windows
APPBeyondtrust< 25.4.270
Powiązane podatności
Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint servi...
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for...
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria...
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase...
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin...