Lucene search

K
jvnJapan Vulnerability NotesJVN:21528670
HistoryOct 24, 2018 - 12:00 a.m.

JVN#21528670: SecureCore Standard Edition vulnerable to authentication bypass

2018-10-2400:00:00
Japan Vulnerability Notes
jvn.jp
541

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

SecureCore Standard Edition provided by Feitian Japan Co., Ltd. contains an authentication bypass vulnerability (CWE-287).

Impact

An attacker may bypass the product’s authentication and log in to a Windows PC.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

Apply the Patch
Apply the patch according to the information provided by the developer.

For more information, refer to the information provided by the developer.

Products Affected

  • SecureCore Standard Edition Version 2.x
    According to the developer, the software is affected by this vulnerability only when it is operated under Windows 8/8.1.

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Related for JVN:21528670