Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process.
Two distinct privileges, roles, capabilities, or rights can be combined in a way that allows an entity to perform unsafe actions that would not be allowed without that combination.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Privilege_management_for_windows | Beyondtrust | * | 25.2 (excluding) |