high7.8
CVE-2024-11220
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server syste…
Impact
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openautomationsoftware | Open Automation Software | before 20.0.0.76 |