Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
[
{
"product": "Installer of electronic tendering and bid opening system",
"vendor": "Acquisition, Technology & Logistics Agency",
"versions": [
{
"status": "affected",
"version": "available prior to June 12, 2017"
}
]
}
]