CVE-2020-13534

A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers CLSID, installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger...

PT-2021-9620

Name of the Vulnerable Software and Affected Versions Dream Report 5 version 5 R20-2 Description A privilege escalation issue exists due to weak privileges in COM Class Identifiers CLSID installed by the software. These CLSID reference LocalServer32 and InprocServer32, which can lead to privilege...

CVE-2020-13534: Incorrect Default Permissions

A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers CLSID, installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges which can lead to privilege escalation when used. An attacker can provide a malicious file to trigger...