jvndb-2021-000003
Vulnerability from jvndb
Published
2021-01-12 15:53
Modified
2021-01-12 15:53
Severity
Summary
The installer of SKYSEA Client View may insecurely load Dynamic Link Libraries
Details
SKYSEA Client View provided by Sky Co., LTD. is an Enterprise IT Asset Management Tool.
The installer of SKYSEA Client View contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).
shogo kumamaru of LAC Co.,Ltd reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
| Vendor | Product |
|---|---|
| Sky Co., LTD. | SKYSEA Client View |
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000003.html",
"dc:date": "2021-01-12T15:53+09:00",
"dcterms:issued": "2021-01-12T15:53+09:00",
"dcterms:modified": "2021-01-12T15:53+09:00",
"description": "SKYSEA Client View provided by Sky Co., LTD. is an Enterprise IT Asset Management Tool.\r\nThe installer of SKYSEA Client View contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).\r\n\r\nshogo kumamaru of LAC Co.,Ltd reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2021/JVNDB-2021-000003.html",
"sec:cpe": {
"#text": "cpe:/a:skygroup:skysea_client_view",
"@product": "SKYSEA Client View",
"@vendor": "Sky Co., LTD.",
"@version": "2.2"
},
"sec:cvss": [
{
"@score": "6.8",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"@version": "2.0"
},
{
"@score": "7.8",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2021-000003",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN69635538/index.html",
"@id": "JVN#69635538",
"@source": "JVN"
},
{
"#text": "https://jvn.jp/en/ta/JVNTA91240916/",
"@id": "JVNTA#91240916",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20616",
"@id": "CVE-2021-20616",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2021-20616",
"@id": "CVE-2021-20616",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-Other",
"@title": "No Mapping(CWE-Other)"
}
],
"title": "The installer of SKYSEA Client View may insecurely load Dynamic Link Libraries"
}
Loading...