CVE-2020-7358

CVE-2020-7358 describes a local privilege escalation vulnerability in Rapid7 AppSpider installer versions prior to 7.2.126. An attacker with local machine access could place a malicious executable with a specific filename, which the installer would then execute instead of the legitimate file. This medium-severity vulnerability (CVSS 6.5) allows for high impact to confidentiality, integrity, and availability, requiring high privileges and user interaction for exploitation. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.