CVE-2021-42254

概要

参考情報

• mandiant/Vulnerability-Disclosures · Third Party Advisory
• beyondtrust.com/blog · Product

privilege management for windows のその他の脆弱性

• CVE-2025-6250中 6.7Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper prot…
• CVE-2025-2297高 7.8Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes i…
• CVE-2025-0889高 7.8Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the ma…
• CVE-2024-25083高 7.8An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiates a repair, there i…
• CVE-2024-1591低 3.3Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO polic…