Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-12612

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevate, it can typically be found within the Program Files (x86) folder and therefore uses the %ProgramFiles(x86)% environment variable. However, when this same policy gets pushed to a 32bit machine, this environment variable does not exist. Therefore, since the standard user can create a user level environment variable, they can repoint this variable to any folder the user has full control of. Then, the folder structure can be created in such a way that a rule matches and arbitrary code runs elevated.

Published

2023-12-12T14:15:07.327

Last Modified

2024-11-21T04:59:55.060

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	beyondtrust	privilege_management_for_windows	< 5.6	Yes
Application	beyondtrust	privilege_management_for_windows	5.6	Yes

References

https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1 Release Notes ([email protected])
https://www.beyondtrust.com/trust-center/security-advisories/bt22-09 Vendor Advisory ([email protected])
https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
https://www.beyondtrust.com/trust-center/security-advisories/bt22-09 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)