CVE-2020-13542

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges.
References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1154 Exploit Technical Description Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:logicaldoc:logicaldoc:8.5.1:*:*:*:*:*:*:*

Information

Published : 2020-12-03 09:15

Updated : 2022-06-07 09:51


NVD link : CVE-2020-13542

Mitre link : CVE-2020-13542


JSON object : View

CWE
CWE-276

Incorrect Default Permissions

Advertisement

dedicated server usa

Products Affected

logicaldoc

  • logicaldoc