CVE-2019-20456

CVE-2019-20456 affects Goverlan Reach Console prior to 9.50, Goverlan Reach Server prior to 3.50, and Goverlan Client Agent prior to 9.20.50. The issue is an Untrusted Search Path that enables Command Injection and Local Privilege Escalation via DLL hijacking. Root cause: DLL search order hijack ...