Japan Vulnerability NotesJVN:46674982JVN#46674982: yoyaku_v41 vulnerable to arbitrary file creation
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.2%
yoyaku_v41 provided by Webservice-DIC is a software to manage conference room reservations. yoyaku_v41 contains a vulnerability that may allow a remote attacker to create arbitrary files (CWE-20).
Impact
An arbitrary file created by an attacker may result in arbitrary code being executed on the server.
Solution
Do not use yoyaku_v41
yoyaku_v41 is no longer being developed or maintained. It is recommended to stop using yoyaku_v41.
Products Affected
- yoyaku_v41
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.2%