VYPR
Low severity3.3NVD Advisory· Published Feb 16, 2024· Updated Jun 17, 2026

CVE-2024-1591

CVE-2024-1591

Description

Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy. This allows them to view the policy and potentially find configuration issues.

Affected products

3
  • cpe:2.3:a:beyondtrust:privilege_management_for_windows:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:beyondtrust:privilege_management_for_windows:*:*:*:*:*:*:*:*range: <24.1
    • (no CPE)range: <24.1
    • (no CPE)range: 1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.