CVE-2019-25257
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2019
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation
LogicalDOC Enterprise 7.7.4 contains multiple authenticated OS command execution vulnerabilities that allow attackers to manipulate binary paths when changing system settings. Attackers can exploit these vulnerabilities by modifying configuration parameters like antivirus.command, ocr.Tesseract.path, and other system paths to execute arbitrary system commands with elevated privileges.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
LogicalDOC Enterprise
- Vendor
- LogicalDOC Srl
- Product
- LogicalDOC Enterprise
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.7.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.7.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.7.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.7.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.6.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.6.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.5.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.4.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.1.1 | affected | Unavailable | Unavailable | Unavailable | None listed |