Published:2024/03/07  Last Updated:2024/03/07

JVN#54451757
Multiple vulnerabilities in SKYSEA Client View

Overview

SKYSEA Client View provided by Sky Co.,LTD. contains multiple vulnerabilities.

Products Affected

CVE-2024-21805

  • SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2
CVE-2024-24964
  • SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2

Description

SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool.
SKYSEA Client View contains multiple vulnerabilities listed below.

  • Improper access control in the specific folder (CWE-284) - CVE-2024-21805
    CVSS v3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Base Score: 3.3
    CVSS v2 AV:L/AC:L/Au:S/C:N/I:P/A:N Base Score: 1.7
  • Improper access control in the resident process (CWE-284) - CVE-2024-24964
    CVSS v3 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score: 7.8
    CVSS v2 AV:L/AC:L/Au:S/C:P/I:P/A:P Base Score: 4.3

Impact

  • An arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege - CVE-2024-21805
  • An arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed - CVE-2024-24964

Solution

Update the software
Update the software to the latest version according to the information provided by the developer.
The developer has released SKYSEA Client View Ver.19.2 that addresses these vulnerabilities.

Apply the patch
For SKYSEA Client View Ver.17.0 to Ver.19.101, the developer has released patches that contain fixes for these vulnerabilities.
For more details, refer to the information provided by the developer.

Vendor Status

Vendor Link
Sky Co.,LTD. [Important] About vulnerability of insufficient access restriction for a specific folder (CVE-2024-21805) / vulnerability of insufficient access restriction for a resident process (CVE-2024-24964) (Text in Japanese)

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

Credit

CVE-2024-21805
Ken Kitahara of LAC Co., Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

CVE-2024-24964
Ruslan Sayfiev, and Denis Faiustov of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to Sky Co.,LTD. and coordinated. Sky Co.,LTD. and JPCERT/CC published respective advisories in order to notify users of the solutions through JVN.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE CVE-2024-21805
CVE-2024-24964
JVN iPedia JVNDB-2024-000028