[Japanese]

JVNDB-2026-000001

Origin validation error vulnerability in Fujitsu Security Solution AuthConductor Client Basic V2

Overview

Fujitsu Security Solution AuthConductor Client Basic V2 provided by Fujitsu Client Computing Limited contains the following vulnerability.
  • Origin validation error (CWE-346) - CVE-2026-20893
MASAHIRO IIDA of LAC Co., Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
CVSS Severity (What is CVSS?)

CVSS V3 Severity:
Base Metrics 7.8 (High) [IPA Score]
  • Attack Vector: Local
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High
Affected Products


Fujitsu Client Computing Limited
  • Fujitsu Security Solution AuthConductor Client Basic V2 versions 2.0.25.0 and earlier

Impact

An attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/or modify the registry value.
Solution

[Update the software]
Update the software to the latest version according to the information provided by the developer.
Vendor Information

Fujitsu Client Computing Limited
CWE (What is CWE?)

  1. No Mapping(CWE-Other) [IPA Evaluation]
CVE (What is CVE?)

  1. CVE-2026-20893
References

  1. JVN : JVN#24626628
Revision History

  • [2026/01/07]
      Web page was published

Date Public2026/01/07
Date First Published2026/01/07
Date Last Updated2026/01/07