CVE-2024-1591

Name of the Vulnerable Software and Affected Versions Privilege Management for Windows versions prior to 24.1

Description A local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy, allowing them to view the policy and potentially find configuration issues.

Recommendations For versions prior to 24.1, update to version 24.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Sysvol directory to minimize the risk of exploitation.