Local Privilege Elevation Vulnerability in LogicalDoc by Logical Objects
CVE-2020-13542

9.3CRITICAL

Key Information:

Vendor

Logicaldoc

Status
Logicaldoc
Vendor
CVE Published:
3 December 2020

What is CVE-2020-13542?

A local privilege elevation vulnerability has been identified in the file system permissions of the LogicalDoc 8.5.1 installation. This vulnerability allows an attacker to manipulate the installation's service binary or DLL files, leading to the execution of arbitrary commands with elevated System privileges. If exploited, this flaw can severely compromise the integrity and confidentiality of the affected system, making it crucial for users and administrators to assess their environments for potential exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

LogicalDoc LogicalDoc 8.5.1

References

https://talosintelligence.com/vulnerability_reports/TALOS...
x_refsource_MISC

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.