CVE-2021-42056

🗓️ 24 Jun 2022 16:14:23Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 79 Views🌐 WEB

Thales SAC 10.7.7 creates insecure temporary files, enabling local attacker to overwrite files and achieve arbitrary command execution

Reporter	Title	Published	Views	Family All 10
GithubExploit	Exploit for Link Following in Thalesgroup Safenet_Authentication_Client	18 Nov 202114:27	–	githubexploit
ATTACKERKB	CVE-2021-42056	24 Jun 202217:15	–	attackerkb
Circl	CVE-2021-42056	24 Jun 202220:31	–	circl
CNNVD	Thales Safenet Authentication Client 后置链接漏洞	24 Jun 202200:00	–	cnnvd
CNVD	Thales Safenet Authentication Client Elevation of Privilege Vulnerability	28 Jun 202200:00	–	cnvd
Cvelist	CVE-2021-42056	24 Jun 202216:14	–	cvelist
EUVD	EUVD-2021-29043	3 Oct 202520:07	–	euvd
NVD	CVE-2021-42056	24 Jun 202217:15	–	nvd
OSV	CVE-2021-42056	24 Jun 202217:15	–	osv
Prion	Design/Logic Flaw	24 Jun 202217:15	–	prion

NVD

Node

thalesgroup safenet_authentication_clientRange≤10.7.7

AND

linux linux_kernelMatch-

OR

microsoft windowsMatch-

Source	Link
github	www.github.com/z00z00z00/Safenet_SAC_CVE-2021-42056

Parameter	Position	Path	Description	CWE
/tmp/eToken.lock/*	path	/tmp/eToken.lock/*	Insecure temporary file created with world-writable permissions enabling symlink attack to overwrite arbitrary files	CWE-59
/tmp/eToken.hid/*	path	/tmp/eToken.hid/*	Insecure temporary file created with world-writable permissions enabling symlink attack to overwrite arbitrary files	CWE-59
/var/tmp/eToken.cache/*	path	/var/tmp/eToken.cache/*	Insecure temporary file created with world-writable permissions enabling symlink attack to overwrite arbitrary files	CWE-59

17 Jun 2026 04:09Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.7

CVSS 27.2

EPSS0.01024

thales sac 10.7.7 security vulnerability local attack arbitrary command execution symlink attack file overwrite