CVE-2020-23968

Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\Ilex\S&G\Logs\000-sngWSService1.log.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.90% chance of exploitation in the next 30 days, 57th percentile

Published

2020-11-10

Updated

2026-07-09

Proof-of-concept exploits (1)

• ricardojba/CVE-2020-23968-ILEX-SignGo-EoP1★ · 2024-02-20

References

• CVE Record
• NVD entry

Related

• CVE-2020-23967
• CVE-2020-23971
• CVE-2020-23966
• CVE-2020-23972
• CVE-2020-23957
• CVE-2020-23973