VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 6, 2020· Updated Jun 17, 2026

CVE-2019-20406

CVE-2019-20406

Description

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a DLL file in a directory in the global path environmental variable variable to inject code & escalate their privileges via a DLL hijacking vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Atlassian/Confluence3 versions
    cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:atlassian:confluence:*:*:*:*:*:*:*:*range: <7.0.5
    • cpe:2.3:a:atlassian:confluence_server:7.1.0:*:*:*:*:*:*:*
    • (no CPE)range: <7.0.5, 7.1.0 to <7.1.1
  • Atlassian/Confluence Data Centercpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.