CVE-2020-13542

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation

Critical · published December 3, 2020

CVSS v3.0
9.3
EPSS
1%
Percentile
48.6
In the wild
Unconfirmed
What it is

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges.

The record
Technical detail
CVSS v3.0
9.3 · CRITICAL
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00611 · 48.6th percentile
Published
2020-12-03T16:24Z
EPSS history
Timeline
  • 03 DEC 16:24Z
    A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation
    cvelistv5