Design/Logic Flaw

2024-02-1619:15:00

PRIOn knowledge base

www.prio-n.com

local attacker

sysvol

configuration issues

privilege management

gpo policy

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy. This allows them to view the policy and potentially find configuration issues.

References

www.beyondtrust.com/trust-center/security-advisories/bt24-02