9.3
Critical
CVE-2020-13533 A privilege escalation vulnerability exists in Dream Report 5 R20-2
Description
A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs in and uses the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dream Report | Versions not published |
Other CVEs of Dream Report
The 4 CVEs of Dream Report →
CVE-2021-21957
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector…
8.8
High
CVE-2020-13532
A privilege escalation vulnerability exists in Dream Report 5 R20-2
9.3
Critical
CVE-2020-13534
A privilege escalation vulnerability exists in Dream Report 5 R20-2
9.3
Critical