VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 28, 2025· Updated Jun 17, 2026

CVE-2025-2297

CVE-2025-2297

Description

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.

Affected products

3
  • Etrust/Privilege Management For Windows2 versions
    cpe:2.3:a:beyondtrust:privilege_management_for_windows:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:beyondtrust:privilege_management_for_windows:*:*:*:*:*:*:*:*range: <25.4.270
    • (no CPE)range: 0
  • Etrust/BeyondTrustllm-create
    Range: <25.4.270.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.