CVE-2018-16165

概要

参考情報

• JPCERTCC/LogonTracer release v1.2.1 · Release Notes
• jvn.jp/en/vu/JVNVU98026636/index.html · Third Party Advisory

logontracer のその他の脆弱性

• CVE-2026-33566中 5.1There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the…
• CVE-2026-33277高 8.7An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.
• CVE-2018-16168緊急 9.8LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.
• CVE-2018-16167緊急 9.8LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
• CVE-2018-16166高 8.8LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.