{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000118.html",
  "dc:date": "2019-08-27T18:03+09:00",
  "dcterms:issued": "2018-11-09T16:13+09:00",
  "dcterms:modified": "2019-08-27T18:03+09:00",
  "description": "The installer of Windows10 Fall Creators Update Modify module for Security Measures tool provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION  contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).\r\n\r\nTomohisa Hasegawa of Canon IT Solutions Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000118.html",
  "sec:cpe": {
    "#text": "cpe:/a:ntt_west:fall_creators_update",
    "@product": "Windows10 Fall Creators Update Modify module for Security Measures tool",
    "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2018-000118",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN15709478/index.html",
      "@id": "JVN#15709478",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/",
      "@id": "JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16177",
      "@id": "CVE-2018-16177",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-16177",
      "@id": "CVE-2018-16177",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "The installer of Windows10 Fall Creators Update Modify module for Security Measures tool may insecurely load Dynamic Link Libraries"
}