CVE-2019-11875

CVE-2019-11875 concerns Blue Prism Robotic Process Automation (RPA) 6.4.0.8445. The issue, in AutomateAppCore.dll, is an access-control flaw that allows privilege escalation when a valid user connects to the server; the user’s roles aren’t required to have permissions. The attack path involves mo...