description: An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiates a repair, there is an attack vector through which the user is able to execute any program with elevated privileges.
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AC:H/AV:L/A:N/C:H/I:H/PR:L/S:U/UI:N
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: NONE
baseScore: 6.3
baseSeverity: MEDIUM
]