VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 9, 2021· Updated Jun 17, 2026

CVE-2020-13533

CVE-2020-13533

Description

A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs in and uses the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Dreamreport/Dream Report2 versions
    cpe:2.3:a:dreamreport:dream_report:5_r20-2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:dreamreport:dream_report:5_r20-2:*:*:*:*:*:*:*
    • (no CPE)range: 5 R20-2
  • Dream Report/Dream Reportdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.