7.8
CVE-2017-2154
- EPSS 1.17%
- Veröffentlicht 28.04.2017 16:59:02
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Erkennungen
LoginUntrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Justsystems ≫ Hanako Version 2015
Justsystems ≫ Hanako Version 2016
Justsystems ≫ Hanako Version 2017
Justsystems ≫ Hanako Version 2017 SwEdition trial_version
Justsystems ≫ Hanako Police Version 5
Justsystems ≫ Hanako Pro Version 3
Justsystems ≫ Just Frontier Version 3
Justsystems ≫ Just Government Version 3
Justsystems ≫ Just Jump Class Version 2
Justsystems ≫ Just Office Version 3 SwEdition eco_print_pack
Justsystems ≫ Just Office Version 3 SwEdition standard
Justsystems ≫ Just Office Version 3 SwEdition tri-de_dataprotect_pack
Justsystems ≫ Just Police Version 3
Justsystems ≫ Just School Version 6
Justsystems ≫ Just School Version 6 SwEdition premium
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.17% | 0.634 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| NIST | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://jvn.jp/en/jp/JVN54268888/index.html
https://www.justsystems.com/jp/info/js17002.html