The vulnerability lies in incorrect file permissions on log files in older versions of Progress MarkLogic Server. Operating‑system level permissions are set too broadly, enabling any local user to read or change log data. This compromises confidentiality and integrity of logs, allowing an attacker to observe system activity or inject misleading entries.

Affected versions are all 12.x releases earlier than 12.1.0 and all 11.x releases earlier than 11.3.7 of Progress Software Corporation's MarkLogic Server.

The CVSS score of 7.1 places this vulnerability in the medium‑to‑high risk category. Since it requires local user privileges, the threat is limited to the local environment. However, logs often contain sensitive diagnostics, so the impact could be significant. Because the EPSS score is unavailable, the likelihood is unknown, but the problem has already been addressed in newer releases. The vulnerability can be exploited by an attacker who gains local access to the server, reading or modifying existing log files. Applying an update addresses the issue for new logs; existing logs keep their original permissions until manually fixed.