CVE-2017-10893
HighSummary
CVE-2017-10893 describes an untrusted search path vulnerability in the JPKI user's software, allowing an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Risk Assessment
The organization may be exposed to unauthorized access and privilege escalation, potentially leading to serious security breaches.
Recommendation
It is recommended to update the JPKI software to the latest version and to monitor and restrict access to directories where malicious files may reside.
Other vulnerabilities in The Public Certification Service for Individuals 'The JPKI user's software' Ver3.1 and earlier
See all- CVE-2016-4902High
A vulnerability in the JPKI user's software for individuals allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. This affects version 3.0.1 and earlier for Windows 7 and later, as well as Windows Vista, and version 2.6 and earlier.
- CVE-2017-2157High
There is an untrusted search path vulnerability in the installers for JPKI user's software for individuals that allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
Original NVD description (English source)
Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.