Untrusted Search Path Vulnerability in FENCE-Explorer for Windows
CVE-2017-10855

7.8HIGH

Key Information:

Vendor

Fujitsu Limited

Status
Fence-explorer For Windows
Vendor
CVE Published:
15 September 2017

What is CVE-2017-10855?

The FENCE-Explorer for Windows has a vulnerability due to an untrusted search path that permits the execution of a Trojan horse DLL placed in an unspecified directory by an attacker. This could potentially allow the attacker to escalate their privileges within the system, leading to unauthorized access and manipulation of sensitive data.

Affected Version(s)

FENCE-Explorer for Windows V8.4.1 and earlier

References

https://jvn.jp/en/jp/JVN57205588/index.html
third-party-advisoryx_refsource_JVN
http://www.fujitsu.com/jp/group/bsc/services/fence/info-2...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2017-10855 : Untrusted Search Path Vulnerability in FENCE-Explorer for Windows