CVE-2018-0515

Untrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 3.0 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2018-02-16

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Azukeru Backup Tool (Flets)
• Flets Azukeru Backup Tool (Nippon Telegraph And Telephone East Corporation)

References

• https://flets.com/azukeru/login/news/info_180213.html
• https://jvn.jp/en/jp/JVN04564808/index.html