CVE-2020-13542

https://notcve.org/view.php?id=CVE-2020-13542

03 Dec 2020 — A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing arbitrary commands with System privileges. Se presenta una vulnerabilidad de escalada de privilegios local en los permisos del sistema de archivos de la instalación de LogicalDoc versión 8.5.1. Dependiendo del vecto... • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1154 • CWE-276: Incorrect Default Permissions •