CVE-2020-28369

HIGH

Beyondtrust Privilege Management For ... - Uncontrolled Search Path

Title source: rule

Description

In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.

References (2)

[Product] https://www.beyondtrust.com/privilege-management/windows-mac

[Vendor Advisory] https://www.beyondtrust.com/trust-center/security-advisories/bt22-08

Scores

CVSS v3 7.8

EPSS 0.0011

EPSS Percentile 30.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-427

Status published

Affected Products (1)

beyondtrust/privilege_management_for_windows < 5.7

Timeline

Published Dec 12, 2023

Tracked Since Feb 18, 2026