CVE-2020-12613

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-12613
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker can spawn a process with multiple users as part of the security token (prior to Avecto elevation). When Avecto elevates the process, it removes the user who is launching the process, but not the second user. Therefore this second user still retains access and can give permission to the process back to the first user.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1 Release Notes
https://www.beyondtrust.com/trust-center/security-advisories/bt22-11 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:beyondtrust:privilege_management_for_windows:*:*:*:*:*:*:*:*
History

14 Dec 2023, 16:37

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
References () https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1 - () https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1 - Release Notes
References () https://www.beyondtrust.com/trust-center/security-advisories/bt22-11 - () https://www.beyondtrust.com/trust-center/security-advisories/bt22-11 - Vendor Advisory
CPE cpe:2.3:a:beyondtrust:privilege_management_for_windows:*:*:*:*:*:*:*:*
First Time Beyondtrust
Beyondtrust privilege Management For Windows

12 Dec 2023, 13:43

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en BeyondTrust Privilege Management para Windows hasta 5.6. Un atacante puede generar un proceso con múltiples usuarios como parte del token de seguridad (antes de la elevación de Avecto). Cuando Avecto eleva el proceso, elimina al usuario que inicia el proceso, pero no al segundo usuario. Por lo tanto, este segundo usuario aún conserva el acceso y puede otorgar permiso para el proceso al primer usuario.

11 Dec 2023, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-12-11 22:15

Updated : 2023-12-14 16:37

NVD link : CVE-2020-12613

Mitre link : CVE-2020-12613

CVE.ORG link : CVE-2020-12613

JSON object : View

Products Affected

beyondtrust

  • privilege_management_for_windows
CWE
NVD-CWE-noinfo