Vulnerability Description
LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings. Attackers can exploit these vulnerabilities by modifying configuration parameters like antivirus.command, ocr.Tesseract.path, and other system paths to execute arbitrary system commands with elevated privileges.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/44021
- https://www.logicaldoc.com
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5452.php
- https://www.exploit-db.com/exploits/44021
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2018-5452.php
FAQ
What is CVE-2019-25257?
CVE-2019-25257 is a vulnerability with a CVSS score of 6.5 (MEDIUM). LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings. Attackers can exploit th...
How severe is CVE-2019-25257?
CVE-2019-25257 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-25257?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.