CVE-2020-13542: Critical severity logicaldoc vulnerability

Published Dec 3, 2020

Updated

A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges.

Affected Software

1 affected component

LogicalDOC LogicalDOC=8.5.1

Event History

Dec 3, 2020

CVE Published

via MITRE·04:24 PM

Data Sourced

via MITRE·04:24 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-13542?

CVE-2020-13542 is classified as a local privilege escalation vulnerability.

How do I fix CVE-2020-13542?

To fix CVE-2020-13542, ensure that you update LogicalDoc to the latest version that addresses the file system permission issues.

What impact does CVE-2020-13542 have on LogicalDoc 8.5.1?

CVE-2020-13542 allows attackers to potentially replace service binaries or DLL files, leading to unauthorized code execution.

Is CVE-2020-13542 easy to exploit?

CVE-2020-13542 can be exploited by local users with sufficient access to modify file system permissions.

What versions of LogicalDoc are affected by CVE-2020-13542?

CVE-2020-13542 specifically affects LogicalDoc version 8.5.1.