CVE-2020-12613

An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. An attacker can spawn a process with multiple users as part of the security token prior to Avecto elevation. When Avecto elevates the process, it removes the user who is launching the process, but not the second...

CVE-2020-12613

BeyondTrust Privilege Management for Windows (up to version 5.6) is affected by CVE-2020-12613. An attacker can spawn a process with multiple users in the security token; during Avecto elevation the launcher’s user is removed, but a second user remains in the token and can grant permissions back ...