JVN#24626628
Origin validation error vulnerability in Fujitsu Security Solution AuthConductor Client Basic V2
Overview
Fujitsu Security Solution AuthConductor Client Basic V2 provided by Fujitsu Client Computing Limited contains an origin validation error vulnerability.
Products Affected
- Fujitsu Security Solution AuthConductor Client Basic V2 versions 2.0.25.0 and earlier
Description
Fujitsu Security Solution AuthConductor Client Basic V2 provided by Fujitsu Client Computing Limited contains the following vulnerability.
- Origin validation error (CWE-346)
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.5
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8
- CVE-2026-20893
Impact
An attacker who can log in to the Windows system where the affected product is installed may execute arbitrary code with SYSTEM privilege and/or modify the registry value.
Solution
Update the software
Update the software to the latest version according to the information provided by the developer.
Vendor Status
| Vendor | Status | Last Update | Vendor Notes |
|---|---|---|---|
| Fujitsu Client Computing Limited | Vulnerable | 2026/01/07 | Fujitsu Client Computing Limited website |
References
JPCERT/CC Addendum
Vulnerability Analysis by JPCERT/CC
Credit
MASAHIRO IIDA of LAC Co., Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Other Information
| JPCERT Alert |
|
| JPCERT Reports |
|
| CERT Advisory |
|
| CPNI Advisory |
|
| TRnotes |
|
| CVE |
CVE-2026-20893 |
| JVN iPedia |
JVNDB-2026-000001 |