CVE-2017-16245

CVE-2017-16245 CVE-2017-16245 のソースコード 元々 Nettitude が公開した Avecto Defendpoint バイパス CVE-2017-16245 の PowerShell 実装は、PowerShell にそのままコピー＆ペーストできます（そしてすべきです）。PowerShell がブロックされている場合は、コマンドプロンプトから powershell.exe を実行してみてください。...

EUVD-2018-3010

Malware in sbrugna...

Design/Logic Flaw

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

CVE-2020-9326

CVE-2020-9326 affects BeyondTrust Privilege Management for Windows and Mac (PMWM, formerly Avecto Defendpoint) versions 5.1 through 5.5 prior to 5.5 SR1. The vulnerability arises from mishandling command-line arguments that include PowerShell .ps1 file extensions, which leads to a crash of Defend...

CVE-2018-10959

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch...

Design/Logic Flaw

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch...

CVE-2018-10959

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch...

CVE-2018-10959

CVE-2018-10959 affects Avecto Defendpoint 4 (before 4.4 SR6) and 5 (before 5.1 SR1). The vulnerability is an Untrusted Search Path issue allowing elevation by modifying environment variables to launch the attacker’s process. Exploitation details beyond this are not provided in the documents. Reme...

CVE-2018-10959

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch...