CVE-2020-15592

SteelCentral Aternity Agent before 11.0.0.120 on Windows allows Privilege Escalation via a crafted file. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC (Inter-Process Communication) primitives to enable the processes to cooperate. The remotely callable methods from remotable objects available through interprocess communication allow loading of arbitrary plugins (i.e., C# assemblies) from the "%PROGRAMFILES(X86)%/Aternity Information Systems/Assistant/plugins” directory, where the name of the plugin is passed as part of an XML-serialized object. However, because the name of the DLL is concatenated with the “.\plugins” string, a directory traversal vulnerability exists in the way plugins are resolved.

• CWE-22

• https://aternity.force.com/customersuccess/s/article/Recorder-tool-security-notification-mitigation-steps-for-On-PremPermissions Required, Third Party Advisory
• https://sec-consult.com/en/blog/advisories/privilege-escalation-vulnerability-in-steelcentral-aternity-agent-cve-2020-15592-cve-2020-15593/Third Party Advisory
• https://aternity.force.com/customersuccess/s/article/Recorder-tool-security-notification-mitigation-steps-for-On-PremPermissions Required, Third Party Advisory
• https://sec-consult.com/en/blog/advisories/privilege-escalation-vulnerability-in-steelcentral-aternity-agent-cve-2020-15592-cve-2020-15593/Third Party Advisory

Published

Jul 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15586Go before 1.13.13 and 1.14.x before 1.14.5 has a data race i…5.9
• CVE-2020-15588An issue was discovered in the client side of Zoho ManageEng…9.8
• CVE-2020-15589A design issue was discovered in GetInternetRequestHandle, I…8.1
• CVE-2020-1559<p>An elevation of privilege vulnerability exists when the W…7.8
• CVE-2020-15590A vulnerability in the Private Internet Access (PIA) VPN Cli…7.5
• CVE-2020-15591fexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20…9.8
• CVE-2020-15593SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles…7.8
• CVE-2020-15594An SSRF issue was discovered in Zoho Application Control Plu…4.3
• CVE-2020-15595An issue was discovered in Zoho Application Control Plus bef…4.3
• CVE-2020-15596The ALPS ALPINE touchpad driver before 8.2206.1717.634, as u…6.7
• CVE-2020-15597SOPlanning 1.46.01 allows persistent XSS via the Project Nam…5.4
• CVE-2020-15598Trustwave ModSecurity 3.x through 3.0.4 allows denial of ser…7.5