JVN#15808274
e-Gov Client Application fails to restrict custom URL schemes properly
Overview
e-Gov Client Application fails to restrict custom URL schemes properly.
Products Affected
- e-Gov Client Application (Windows version) versions prior to 2.1.1.0
- e-Gov Client Application (macOS version) versions prior to 1.1.1.0
Description
e-Gov Client Application is installed, a Custom URL Scheme is configured on the system to enable invoking the product through a web browser.
This custom URL contains the information about the website which the product should access, and a crafted URL may direct the application to access an unexpected website (CWE-939).
Impact
A crafted URL may direct the product to access an arbitrary website. As a result, the user may become a victim of a phishing attack.
Solution
Update the Product
Update the product to the latest version according to the information provided by the developer.
The developer released the following versions to fix the issue.
- e-Gov Client Application (Windows version) 2.1.1.0
- e-Gov Client Application (macOS version) 1.1.1.0
Vendor Status
| Vendor | Link |
| Digital Agency | Notice of e-Gov Client Application Update (Text in Japanese) |
References
JPCERT/CC Addendum
Vulnerability Analysis by JPCERT/CC
| Attack Vector(AV) | Physical (P) | Local (L) | Adjacent (A) | Network (N) |
|---|---|---|---|---|
| Attack Complexity(AC) | High (H) | Low (L) | ||
| Privileges Required(PR) | High (H) | Low (L) | None (N) | |
| User Interaction(UI) | Required (R) | None (N) | ||
| Scope(S) | Unchanged (U) | Changed (C) | ||
| Confidentiality Impact(C) | None (N) | Low (L) | High (H) | |
| Integrity Impact(I) | None (N) | Low (L) | High (H) | |
| Availability Impact(A) | None (N) | Low (L) | High (H) |
| Access Vector(AV) | Local (L) | Adjacent Network (A) | Network (N) |
|---|---|---|---|
| Access Complexity(AC) | High (H) | Medium (M) | Low (L) |
| Authentication(Au) | Multiple (M) | Single (S) | None (N) |
| Confidentiality Impact(C) | None (N) | Partial (P) | Complete (C) |
| Integrity Impact(I) | None (N) | Partial (P) | Complete (C) |
| Availability Impact(A) | None (N) | Partial (P) | Complete (C) |
Credit
Toyama Taku of NEC Corporation reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Other Information
| JPCERT Alert |
|
| JPCERT Reports |
|
| CERT Advisory |
|
| CPNI Advisory |
|
| TRnotes |
|
| CVE |
CVE-2023-44689 |
| JVN iPedia |
JVNDB-2023-000098 |