CVE-2018-16167

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2019-01-09

Last modified

2024-08-05

Weaknesses

CWE-78

Affected products

• Logontracer (Jpcert)
• Logontracer (Jpcert Coordination Center)

References

• https://github.com/JPCERTCC/LogonTracer/releases/tag/v1.2.1
• https://jvn.jp/en/vu/JVNVU98026636/index.html