VULNERABILITY INTELLIGENCE

CVE-2019-20406

CVSS score7.8 HIGH
EPSS probability0.48%
CISA KEVNot currently listed
Published2020-02-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a DLL file in a directory in the global path environmental variable variable to inject code & escalate their privileges via a DLL hijacking vulnerability.

Weakness classification

  • nvd@nist.gov: CWE-427

Primary references