What is CVE-2019-20456?

CVE-2019-20456 is a high-severity vulnerability in Goverlan Client Agent, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2020-02-16.

How severe is CVE-2019-20456?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Goverlan Client Agent

CVE-2019-20456

Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Path that leads to Command Injection and Local Privilege Escalation via DLL hijacking.

EPSS: 0.007 (50.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Goverlan Client_agent
Goverlan Reach_console
Goverlan Reach_server
Microsoft Windows
N/a — versions n/a

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

cve@mitre.org (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-20456?: CVE-2019-20456 is a high-severity vulnerability in Goverlan Client Agent, classified under Untrusted Search Path. CVSS score: 7.8/10. Published 2020-02-16.
How severe is CVE-2019-20456?: High severity. CVSS v3 base score is 7.8 out of 10.