Vulnerability Details CVE-2020-13542
A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.8%
CVSS Severity
CVSS v3 Score 9.3
CVSS v2 Score 7.2
References
Products affected by CVE-2020-13542
-
cpe:2.3:a:logicaldoc:logicaldoc:8.5.1