PT-2017-11567 · Hibun · Hibun Confidential File Decryption Program

Eili Masami · Published 2017-10-12 · Updated 2017-10-20 · CVE-2017-10863

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HIBUN Confidential File Decryption program versions prior to 10.50.0.5

Description The issue is related to an untrusted search path vulnerability. This allows an attacker to potentially gain privileges by using a Trojan horse DLL in an unspecified directory.

Recommendations For versions prior to 10.50.0.5, update to version 10.50.0.5 or later to resolve the issue.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2017-10863

Affected Products

Hibun Confidential File Decryption Program

References · 3

• http://hitachi-solutions.co.jp/hibun/sp/support/importance/20170929.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10863 · Security Note
• https://jvn.jp/en/jp/JVN58909026/index.html · Note