CVE-2024-25083 MEDIUM

CVE-2024-25083

Vendor N/A
Product n/a
Published February 16, 2024
Last update August 28, 2024

CVSS base score

6.3/10
Attack vector Local
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:L/S:U/UI:N

What the vulnerability does

01Description

An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiates a repair, there is an attack vector through which the user is able to execute any program with elevated privileges.

Key dates

02Disclosure timeline

February 16, 2024 CVE published
August 28, 2024 Record updated