CVE-2019-20383

ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges by local users via manipulations involving files and using symbolic links.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
abbyyfinereader
𝑥
< 15.0.112.2130
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.abbyydownloads.com/fc12/r3/ReleaseNotes_FC12_R3_U1_1299.39_build_12.0.3.2634.pdf
https://amonitoring.ru/article/abbyy-lpe/
https://support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log
http://www.abbyydownloads.com/fc12/r3/ReleaseNotes_FC12_R3_U1_1299.39_build_12.0.3.2634.pdf
https://amonitoring.ru/article/abbyy-lpe/
https://support.abbyy.com/hc/en-us/articles/360008536920-FineReader-15-Change-Log