CVE-2019-20383CWE-59

CVE-2019-20383

High · published August 14, 2020

CVSS v3.1

7.8

EPSS

Percentile

40.5

In the wild

Unconfirmed

What it is

ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges by local users via manipulations involving files and using symbolic links.

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00480 · 40.5th percentile
Weakness: CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published: 2020-08-14T03:15Z

Affected products (1)

Product	Versions	Fixed in
abbyy/finereader	< 15.0.112.2130	15.0.112.2130

References (6)

http://www.abbyydownloads.com/fc12/r3/ReleaseNotes_FC12_R3_U1_1299.39_build_12.0.3.2634.pdf · [email protected]https://amonitoring.ru/article/abbyy-lpe/ · [email protected]https://support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log · [email protected]http://www.abbyydownloads.com/fc12/r3/ReleaseNotes_FC12_R3_U1_1299.39_build_12.0.3.2634.pdf · af854a3a-2127-422b-91ae-364da2661108 https://amonitoring.ru/article/abbyy-lpe/ · af854a3a-2127-422b-91ae-364da2661108 https://support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

13 AUG 22:51Z
ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges by local users via manipulations…
cvelistv5