CVE-2017-20123CWE-426

Viscosity DLL untrusted search path

High · published June 30, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
69.9
In the wild
Unconfirmed
What it is

A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the component DLL Handler. The manipulation leads to untrusted search path. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.8 is able to address this issue. It is recommended to upgrade the affected component.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01295 · 69.9th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2022-06-30T05:05Z
EPSS history
Timeline
  • 30 JUN 05:05Z
    Viscosity DLL untrusted search path
    cvelistv5