CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: artica pandora fms 7.0 ng before 735 suffers from local privilege escalation due to improper permissions on c:\pandorafms and its sub-folders, allowing standard users to create new files. moreover, the apache service httpd.exe will try to execute cmd.exe from c:\pandorafms (the current directory) as nt authority\system upon web requests to the portal. this will effectively allow non-privileged users to escalate privileges to nt authority\system.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-06-29
Last Modified Date: 2019-07-03