{"id":"CVE-2020-23968","title":"Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\\Ilex\\S&G\\Logs\\000-sngWSService1.log.","summary":"Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\\Ilex\\S&G\\Logs\\000-sngWSService1.log.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-59"],"vendor":"ilex","product":"international_sign&go","affected":["international_sign&go = 7.1"],"published":"2020-11-10","updated":"2026-07-05","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-23968","references":[{"url":"http://signgo.com","label":"cve@mitre.org"},{"url":"https://ricardojba.github.io/CVE-Pending-ILEX-SignGo-EoP/","label":"cve@mitre.org"},{"url":"http://ilex.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://signgo.com","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://ricardojba.github.io/CVE-Pending-ILEX-SignGo-EoP/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.00895,"epssPercentile":0.57513,"ingestedAt":"2026-07-05T02:00:01.323Z","exploits":{"github":1,"githubRepos":["https://github.com/ricardojba/CVE-2020-23968-ILEX-SignGo-EoP"],"checkedAt":"2026-09-21T15:23:51.562Z"},"exploitAvailable":true,"slug":"CVE-2020-23968","body":"## Overview\n\nIlex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\\Ilex\\S&G\\Logs\\000-sngWSService1.log.\n\n## Affected\n\n- `international_sign&go = 7.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":55,"depthScoreParts":{"impact":42.9,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[{"seq":4474,"id":"CVE-2020-23968","ts":1788887182707,"field":"exploit_available","old":"false","new":"true"},{"seq":3357,"id":"CVE-2020-23968","ts":1788886301656,"field":"exploit_available","old":"true","new":"false"},{"seq":2212,"id":"CVE-2020-23968","ts":1788882971365,"field":"exploit_available","old":"false","new":"true"},{"seq":1241,"id":"CVE-2020-23968","ts":1788882382928,"field":"exploit_available","old":"true","new":"false"},{"seq":355,"id":"CVE-2020-23968","ts":1788881817607,"field":"exploit_available","old":"false","new":"true"}]}