Refine your search

3 vulnerabilities found for The Public Certification Service for Individuals "The JPKI user's software" by Japan Agency for Local Authority Information Systems

jvndb-2017-000245
Vulnerability from jvndb
Published
2017-12-06 14:42
Modified
2018-03-14 14:07
Severity ?
7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries
Details
The installer of The Public Certification Service for Individuals "The JPKI user's software" provided by Japan Agency for Local Authority Information Systems (J-LIS) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Note that this vulnerability is different from JVN#91002412 and JVN#39605485. BlackWingCat of Pink Flying Whale reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000245.html",
  "dc:date": "2018-03-14T14:07+09:00",
  "dcterms:issued": "2017-12-06T14:42+09:00",
  "dcterms:modified": "2018-03-14T14:07+09:00",
  "description": "The installer of The Public Certification Service for Individuals \"The JPKI user\u0027s software\" provided by Japan Agency for Local Authority Information Systems (J-LIS) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).\r\n\r\nNote that this vulnerability is different from JVN#91002412 and JVN#39605485.\r\n\r\nBlackWingCat of Pink Flying Whale reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000245.html",
  "sec:cpe": {
    "#text": "cpe:/a:j-lis:the_public_certification_service_for_individuals",
    "@product": "The Public Certification Service for Individuals \"The JPKI user\u0027s software\"",
    "@vendor": "Japan Agency for Local Authority Information Systems",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2017-000245",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN30352845/index.html",
      "@id": "JVN#30352845",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/index.html",
      "@id": "JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10893",
      "@id": "CVE-2017-10893",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-10893",
      "@id": "CVE-2017-10893",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "The installer of The Public Certification Service for Individuals \"The JPKI user\u0027s software\" may insecurely load Dynamic Link Libraries"
}

jvndb-2017-000083
Vulnerability from jvndb
Published
2017-05-09 13:52
Modified
2017-11-27 17:23
Severity ?
7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries
Details
The installer of The Public Certification Service for Individuals "The JPKI user's software" provided by Japan Agency for Local Authority Information Systems (J-LIS) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Note that this vulnerability is different from JVN#91002412. Eiji James Yoshida of Security Professionals Network Inc. and Takashi Yoshikawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000083.html",
  "dc:date": "2017-11-27T17:23+09:00",
  "dcterms:issued": "2017-05-09T13:52+09:00",
  "dcterms:modified": "2017-11-27T17:23+09:00",
  "description": "The installer of The Public Certification Service for Individuals \"The JPKI user\u0027s software\" provided by Japan Agency for Local Authority Information Systems (J-LIS) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.\r\n\r\nNote that this vulnerability is different from JVN#91002412.\r\n\r\nEiji James Yoshida of Security Professionals Network Inc. and Takashi Yoshikawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000083.html",
  "sec:cpe": {
    "#text": "cpe:/a:j-lis:the_public_certification_service_for_individuals",
    "@product": "The Public Certification Service for Individuals \"The JPKI user\u0027s software\"",
    "@vendor": "Japan Agency for Local Authority Information Systems",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2017-000083",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN39605485/index.html",
      "@id": "JVN#39605485",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2157",
      "@id": "CVE-2017-2157",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-2157",
      "@id": "CVE-2017-2157",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "The installer of The Public Certification Service for Individuals \"The JPKI user\u0027s software\" may insecurely load Dynamic Link Libraries"
}

jvndb-2016-000212
Vulnerability from jvndb
Published
2016-11-01 16:44
Modified
2017-12-25 11:28
Severity ?
7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries
Details
The installer of The Public Certification Service for Individuals "The JPKI user's software" provided by Japan Agency for Local Authority Information Systems (J-LIS) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000212.html",
  "dc:date": "2017-12-25T11:28+09:00",
  "dcterms:issued": "2016-11-01T16:44+09:00",
  "dcterms:modified": "2017-12-25T11:28+09:00",
  "description": "The installer of The Public Certification Service for Individuals \"The JPKI user\u0027s software\" provided by Japan Agency for Local Authority Information Systems (J-LIS) contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.\r\n\r\nYuji Tounai of NTT Communications Corporation reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000212.html",
  "sec:cpe": {
    "#text": "cpe:/a:j-lis:the_public_certification_service_for_individuals",
    "@product": "The Public Certification Service for Individuals \"The JPKI user\u0027s software\"",
    "@vendor": "Japan Agency for Local Authority Information Systems",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2016-000212",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN91002412/index.html",
      "@id": "JVN#91002412",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4902",
      "@id": "CVE-2016-4902",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2016-4902",
      "@id": "CVE-2016-4902",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "The installer of The Public Certification Service for Individuals \"The JPKI user\u0027s software\" may insecurely load Dynamic Link Libraries"
}