CVE-2017-2154
High
Description
Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], JUST Office 3 [Eco Print Package], JUST Office 3 & Tri-De DataProtect Package, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, Hanako Police 5, JUST Police 3, Hanako 2017 trial version allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
SeverityHigh
CVSS7.8
Exploit probability—
ProductJustsystems Hanako
PublishedApr 28, 2017
First seenApr 28, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| justsystems hanako | 2015, 2016, 2017 | — |
| justsystems hanako_police | 5 | — |
| justsystems hanako_pro | 3 | — |
| justsystems just_frontier | 3 | — |
| justsystems just_government | 3 | — |
| justsystems just_jump_class | 2 | — |
| justsystems just_office | 3 | — |
| justsystems just_police | 3 | — |
| justsystems just_school | 6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.