Published: 2017/06/12  Last Updated: 2021/01/15

Information from Acquisition, Technology & Logistics Agency

Vulnerability ID:JVN#27198823
Title:Installer of electronic tendering and bid opening system provided by Acquisition, Technology & Logistics Agency may insecurely invoke an executable file
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.

The vulnerability has been eliminated by modifying the client-side bidder
environment so that it does not depend on the JAVA language.
When using the electronic bidding and opening bid system, please use the
latest installer to set up the bidder environment based on the information
provided by the developer.

update history

2021/01/15