Privilege Management for Windows vulnerabilities
3 known vulnerabilities in Privilege Management for Windows from BeyondTrust. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.8 High severity
Privilege Management for Windows: Privilege Chaining
Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile file
- 7.8 High severity
Privilege Management for Windows: Privilege Chaining
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a
- 7.8 High severity
privilege_management_for_windows: Incorrect Privilege Assignment
An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiates a repair, there is an attack vector through which the user is able to execute any program with elevated privileges.