9.3
Critical
CVE-2020-13534 A privilege escalation vulnerability exists in Dream Report 5 R20-2
Description
A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dream Report | Versions not published |
Other CVEs of Dream Report
The 4 CVEs of Dream Report →
CVE-2021-21957
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector…
8.8
High
CVE-2020-13532
A privilege escalation vulnerability exists in Dream Report 5 R20-2
9.3
Critical
CVE-2020-13533
A privilege escalation vulnerability exists in Dream Report 5 R20-2
9.3
Critical