CVE-2024-25083

Summary

CVE-2024-25083 is a newly disclosed vulnerability affecting BeyondTrust Privilege Management for Windows versions prior to 24.1. This issue enables a low-privileged user to execute any program with elevated privileges during a repair process, posing a significant risk to organizational security. The vulnerability allows an attacker to bypass the security controls intended to restrict user privileges, potentially leading to unauthorized software installations, data theft, or system compromise. It is essential that users upgrade to the latest BeyondTrust Privilege Management version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.