CVE-2017-2188

Опубликовано: 07 июл. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Untrusted search path vulnerability in Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) 2014 March Edition (Ver.9.0.001.001) [Updated on 2017 June 9], (Ver.8.0.001.001) [Updated on 2016 May 31] and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Ссылки

http://www.maff.go.jp/j/nousin/seko/nouhin_youryou/densi.html
Vendor Advisory
https://jvn.jp/en/jp/JVN65154137/index.html
Third Party Advisory
VDB Entry
http://www.maff.go.jp/j/nousin/seko/nouhin_youryou/densi.html
Vendor Advisory
https://jvn.jp/en/jp/JVN65154137/index.html
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:maff:denshinouhin_check_system:8.0.001.001:*:*:*:*:*:*:*

cpe:2.3:a:maff:denshinouhin_check_system:9.0.001.001:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00222

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-5www-969v-2v3g