CVE-2020-37030: Outline Service 1.3.3 - 'Outline Service ' Unquoted Service Path
Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in C:\Program Files (x86)\Outline to inject malicious code that would execute with LocalSystem permissions during service startup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37030?
CVE-2020-37030 is classified as a medium severity vulnerability due to its potential to allow local users to execute arbitrary code with elevated privileges.
How do I fix CVE-2020-37030?
To mitigate CVE-2020-37030, ensure the service path for Outline Service 1.3.3 is properly quoted to prevent arbitrary code execution.
Who is affected by CVE-2020-37030?
CVE-2020-37030 affects users running Outline Service 1.3.3 on Windows operating systems.
What is the impact of CVE-2020-37030?
The impact of CVE-2020-37030 includes the potential exploitation by local users to execute malicious code with elevated privileges.
Is there a workaround for CVE-2020-37030?
Currently, the recommended workaround for CVE-2020-37030 is to modify the service configurations to ensure the executable path is quoted.