JVNDB-2010-002468

EUR Form Client Arbitrary File Execution Vulnerability

EUR Form Client has an arbitrary file execution vulnerability.

Base Metrics: 9.3 (High) [IPA Score]

• Access Vector: Network
• Access Complexity: Medium
• Authentication: None
• Confidentiality Impact: Complete
• Integrity Impact: Complete
• Availability Impact: Complete

Hitachi, Ltd

• EUR Form Client
• EUR Form Service
• uCosminexus EUR Form Service
• Electronic Form Workflow Standard Set
• Electronic Form Workflow Professional Library Set
• Electronic Form Workflow Developer Client Set
• Electronic Form Workflow Developer Set
• Electronic Form Workflow Set

A remote attacker could execute arbitrary file on the affected system.

Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action.

Hitachi, Ltd

• Hitachi Software Vulnerability Information : HS10-027

1. No Mapping(CWE-noinfo) [IPA Evaluation]

[2010/12/14]
  Web page published