Command-Line Argument Mishandling in BeyondTrust Privilege Management for Windows and Mac (PMWM) 5.1-5.5 before 5.5 SR1

Command-Line Argument Mishandling in BeyondTrust Privilege Management for Windows and Mac (PMWM) 5.1-5.5 before 5.5 SR1

CVE-2020-9326 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

BeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly Avecto Defendpoint) 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash.

Learn more about our Web Application Penetration Testing UK.