CVE-2024-25083

CVSS 6.3 MEDIUMEPSS 0.1%CWE-266

An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiates a repair, there is an attack vector through which the user is able to execute any program with elevated privileges.

CVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:L/S:U/UI:N

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.beyondtrust.com/trust-center/security-advisories/bt24-01