Lucene search

[email protected]CVE-2023-2737

HistoryAug 16, 2023 - 4:15 p.m.

CVE-2023-2737

2023-08-1616:15:10

CWE-276

[email protected]

web.nvd.nist.gov

cve-2023-2737

improper log permissions

safenet authentication service

denial of service

local privilege escalation

5.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.

Affected configurations

NVD

Node

microsoftwindowsMatch-

AND

thalesgroupsafenet_authentication_serviceMatch3.4.0

CPENameOperatorVersion
thalesgroup:safenet_authentication_servicethalesgroup safenet authentication serviceeq3.4.0

CPE	Name	Operator	Version
thalesgroup:safenet_authentication_service	thalesgroup safenet authentication service	eq	3.4.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "SafeNet Authtentication Service Agent",
    "vendor": "Thales",
    "versions": [
      {
        "lessThan": "3.6.1",
        "status": "affected",
        "version": "SafeNet Authentication Service Agent ",
        "versionType": "3.6.0"
      }
    ]
  }
]

References

supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=08f460ba47bba550c0e42e61e36d432f&sysparm_article=KB0027485

5.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

JSON

Related for CVE-2023-2737

cvelist1 nvd1 prion1