Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9rg4-33x9-wfrh

Опубликовано: 25 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating the decrypted shared key in process memory. The threat is mitigated by the Agent Protection feature.

The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating the decrypted shared key in process memory. The threat is mitigated by the Agent Protection feature.

EPSS

Процентиль: 1%
0.00011
Низкий

6.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.7
nvd
около 2 лет назад

The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating the decrypted shared key in process memory. The threat is mitigated by the Agent Protection feature.

EPSS

Процентиль: 1%
0.00011
Низкий

6.7 Medium

CVSS3