CVE-2020-12615

Name of the Vulnerable Software and Affected Versions BeyondTrust Privilege Management for Windows versions through 5.6

Description An issue was discovered in BeyondTrust Privilege Management for Windows. When adding the Add Admin token to a process and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary processes.

Recommendations For versions through 5.6, consider restricting the use of the Add Admin token to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.