7.2Hoch
CVE-2025-2297Privilege Management for Windows - Elevation of Privilege
Beschreibung
Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.
Schwachstellentyp (CWE):
CWE-268
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| BeyondTrust | Privilege Management for Windows | < <25.4.270 |
Referenzen und Patches
CPE-Treffer (NVD) (1)
cpe:2.3:a:beyondtrust:privilege_management_for_windows:*:*:*:*:*:*:*:*< 25.4.270