CVE-2017-10893
Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-12-08
- Last modified
- 2024-08-05
- Weaknesses
- CWE-426
Affected products
- The Public Certification Service For Individuals (J-lis)
- The Public Certification Service For Individuals The Jpki Users Software (Japan Agency For Local Authority Information Systems)
References
- https://jvn.jp/en/jp/JVN30352845/index.html
