9.3
Critical
CVE-2020-13532 A privilege escalation vulnerability exists in Dream Report 5 R20-2
Description
A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges to NT SYSTEM. An attacker can provide a malicious file to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dream Report | Versions not published |
Other CVEs of Dream Report
The 4 CVEs of Dream Report →
CVE-2021-21957
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector…
8.8
High
CVE-2020-13533
A privilege escalation vulnerability exists in Dream Report 5 R20-2
9.3
Critical
CVE-2020-13534
A privilege escalation vulnerability exists in Dream Report 5 R20-2
9.3
Critical