PT-2017-11523 · Malion · Malion For Mac+2

Muneaki Nishimura · Published 2017-08-04 · Updated 2017-08-15 · CVE-2017-10815

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MaLion for Windows versions 5.2.1 and earlier MaLion for Mac versions 4.0.1 through 5.2.1

Description The issue allows remote attackers to bypass authentication and execute arbitrary commands or operations on Terminal Agent when the "Remote Control" component is installed.

Recommendations For MaLion for Windows versions 5.2.1 and earlier, uninstall or disable the "Remote Control" component until a fix is available. For MaLion for Mac versions 4.0.1 through 5.2.1, uninstall or disable the "Remote Control" component until a fix is available.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-10815

Affected Products

Malion For Mac

Malion For Windows

Terminal Agent

References · 4

• http://intercom.co.jp/information/2017/0801.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10815 · Security Note
• https://osv.dev/vulnerability/CVE-2017-10815 · Vendor Advisory
• https://jvn.jp/en/vu/JVNVU91587298/index.html · Note