Design/Logic Flaw

2022-06-2417:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%

JSON

Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges.

CPENameOperatorVersion
safenet_authentication_clientle10.7.7

CPE	Name	Operator	Version
	safenet_authentication_client	le	10.7.7

References

github.com/z00z00z00/Safenet_SAC_CVE-2021-42056