TI-2017-01478 CVE-2017-2178 · GHSA-95gw-mf46-9jh4Untrusted search path in Acquisition, Technology & Logistics Agency Installer of…Priority MEDIUM 42Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01749 · Published 2017-06-09 · No fix listed CWE-426