A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1154 | Exploit Technical Description Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: talos
Published: 2020-12-03T16:24:27
Updated: 2020-12-03T16:24:27
Reserved: 2020-05-26T00:00:00
Link: CVE-2020-13542
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-12-03T17:15:12.020
Modified: 2022-06-07T16:51:36.620
Link: CVE-2020-13542
JSON object: View
Redhat Information
No data.
CWE