{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2024-1591","sourceIdentifier":"13061848-ea10-403d-bd75-c83a022c2891","published":"2024-02-16T19:15:08.207","lastModified":"2026-06-17T07:04:35.813","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy. This allows them to view the policy and potentially find configuration issues."},{"lang":"es","value":"Antes de la versión 24.1, un atacante autenticado local puede ver Sysvol cuando Privilege Management para Windows está configurado para usar una política de GPO. Esto les permite ver la política y potencialmente encontrar problemas de configuración."}],"affected":[{"source":"13061848-ea10-403d-bd75-c83a022c2891","affectedData":[{"vendor":"BeyondTrust","product":"Privilege Management for Windows","defaultStatus":"unaffected","platforms":["Windows"],"versions":[{"version":"1","lessThan":"24.1","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"13061848-ea10-403d-bd75-c83a022c2891","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","baseScore":3.3,"baseSeverity":"LOW","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":1.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-02-18T00:44:16.042553Z","id":"CVE-2024-1591","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"13061848-ea10-403d-bd75-c83a022c2891","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beyondtrust:privilege_management_for_windows:*:*:*:*:*:*:*:*","versionEndExcluding":"24.1","matchCriteriaId":"CCA4D726-9CA4-40F5-8779-2DDE3E39B9CB"}]}]}],"references":[{"url":"https://www.beyondtrust.com/trust-center/security-advisories/bt24-02","source":"13061848-ea10-403d-bd75-c83a022c2891","tags":["Vendor Advisory"]},{"url":"https://www.beyondtrust.com/trust-center/security-advisories/bt24-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}