YubiKey Manager Privilege Escalation Let Attacker Perform Admin Functions

YubiKey Manager GUI on Windows before version 1.2.6 has a vulnerability that could allow an attacker to escalate privileges. Due to a limitation in Windows, it requires administrator privileges to interact with FIDO authenticators.  An attacker can exploit this by tricking a user into running the YubiKey Manager GUI with administrator rights. Once elevated, any […]

The post YubiKey Manager Privilege Escalation Let Attacker Perform Admin Functions appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security News …

admin administrator attacker authenticators can computer security cve escalation exploit fido functions gui manager privilege privilege escalation privileges running security updates version version 1 vulnerability windows yubikey