13 matches found
Safenet_SAC_CVE-2021-42056
SafeNet 认证客户端权限提升漏洞 CVE-2021-42056 根据Thales的网站1，SafeNet认证客户端是一个中间件客户端，用于管理Thales庞大的基于证书的身份验证器SafeNet产品组合，包括eToken、SafeNet IDPrime智能卡、USB及基于软件的设备。 多个文件设置了不恰当的权限，允许以root用户覆盖文件，以及权限提升（需要多个步骤）。 细节 CWE-378：不安全权限下的临时文件创建 CWE-377：不安全的临时文件 在安装过程中，Safenet 对以下目录设置了 chmod 777，对文件设置了 666（列出在最新SAC版本中仍然存在漏洞的文件...
CVE-2023-5993
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...
CVE-2023-5993
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...
CVE-2023-7016
A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...
CVE-2023-7016 Privilege Escalation in SafeNet Authentication Client
A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...
CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...
CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...
CVE-2023-7016: Improper Privilege Management
A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access...
PT-2024-14855 · Microsoft +1 · Windows Installer +1
Name of the Vulnerable Software and Affected Versions: Thales SafeNet Authentication Client versions prior to 10.8 R10 Description: A flaw in the Windows Installer in Thales SafeNet Authentication Client allows an attacker to escalate their privilege level via local access. Recommendations: For...
PT-2024-15179 · Thales · Thales Safenet Authentication Client
Name of the Vulnerable Software and Affected Versions: Thales SafeNet Authentication Client versions prior to 10.8 R10 Description: A flaw in the software allows an attacker to execute code at a SYSTEM level via local access on Windows. Recommendations: For versions prior to 10.8 R10, update to...
CVE-2023-5993: Improper Privilege Management
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...
CVE-2021-42056: Improper Link Resolution Before File Access
Thales Safenet Authentication Client SAC for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges...
