{"cve":"CVE-2020-12614","nvd":{"published":"2023-12-12T15:15:07.363","modified":"2026-06-17T02:52:01.377","status":"Modified","description":"An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is protected by this criteria, it can be leveraged by a malicious actor to achieve Elevation of Privileges from standard user to administrator.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},"cwes":["CWE-295"],"references":["https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1","https://www.beyondtrust.com/trust-center/security-advisories/bt22-10","https://www.beyondtrust.com/support/changelog/privilege-management-for-windows-5-6-sr1","https://www.beyondtrust.com/trust-center/security-advisories/bt22-10"],"products":["beyondtrust:privilege_management_for_windows"],"source":"nvd","synced_at":"2026-10-19T21:42:34.585441961+00:00"},"epss":{"cve":"CVE-2020-12614","score":0.00142,"percentile":0.03548,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}