CVE-2017-2175

Опубликовано: 22 мая 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

Ссылки

http://jvndb.jvn.jp/jvndb/JVNDB-2017-000098
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN12493656/index.html
Third Party Advisory
VDB Entry
https://www.ipa.go.jp/sec/info/20170519.html
Vendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2017-000098
Third Party Advisory
VDB Entry
https://jvn.jp/en/jp/JVN12493656/index.html
Third Party Advisory
VDB Entry
https://www.ipa.go.jp/sec/info/20170519.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ipa:empirical_project_monitor_-_extended:-:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.0039

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-c2j7-mgrp-5g3p