Security Advisory

CVE-2020-13542

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-12-03 16:24:27
Last updated 2024-08-04 12:18:18
Assigner talos
State PUBLISHED

Description

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges.