CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: multiple untrusted search path vulnerabilities in (1) watchguard log collector (wlcollector.exe) and (2) watchguard webblocker server (wbserver.exe) in watchguard server center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a trojan horse wgpr.dll file in the application's bin directory.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-10-03
Last Modified Date: 2013-10-07