9.3
Critique
CVE-2020-13534 A privilege escalation vulnerability exists in Dream Report 5 R20-2
Description
A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dream Report | Versions non publiées |
Autres CVE de Dream Report
Les 4 CVE de Dream Report →
CVE-2021-21957
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector…
8.8
Élevée
CVE-2020-13532
A privilege escalation vulnerability exists in Dream Report 5 R20-2
9.3
Critique
CVE-2020-13533
A privilege escalation vulnerability exists in Dream Report 5 R20-2
9.3
Critique