Database administrator access via overprivileged application credentials

Privilege escalation in BinSoft mpGabinet 23.12.19 and earlier allows local users to gain database administrator access. The database account embedded in each running application instance is granted administrative rights rather than only the permissions needed for routine application operations. Local access to an active client process is required to extract the credentials from memory; the credentials then permit database actions unavailable through the application interface.