CVE-2020-25737: 
Homebrew vulnerability analysis and mitigation

An elevation of privilege vulnerability exists in Hackolade versions prior to 4.2.0 on Windows that could allow local users to gain elevated privileges during an uninstall of the application. The vulnerability, tracked as CVE-2020-25737, was discovered in specific deployment scenarios and affects the application's uninstall workflow. The issue was acknowledged by IntegrIT SA/NV and fixed in Hackolade version 4.2.0 (GitHub Advisory).

The vulnerability exists in the application uninstall workflow of Hackolade for Windows. The issue has been rated with a CVSS v3.1 Base Score of 7.8 HIGH (Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The vulnerability is classified as a Least Privilege Violation, allowing for potential privilege escalation during the uninstallation process (NVD).

If exploited, this vulnerability could allow local users to gain elevated privileges on the affected Windows system during the application's uninstall process. This could potentially lead to unauthorized access and system compromise (GitHub Advisory).

The vulnerability requires a local attack vector and can only be exploited by a locally logged-in user who must be interactively logged in during the uninstall process. The attack complexity is considered low, requiring minimal access conditions to be exploited (GitHub Advisory).

The vulnerability has been fixed in Hackolade version 4.2.0. Users are advised to upgrade to this version or later to mitigate the risk. No alternative workarounds have been published (GitHub Advisory).