EUVD-2019-17680

Malware in sbrugna...

EUVD-2019-17681

Malware in sbrugna...

CVE-2019-8282

Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle MITM attack and replace original language pack by malicious one...

CVE-2019-8283

Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it...

PT-2019-18964

Name of the Vulnerable Software and Affected Versions Gemalto Admin Control Center versions prior to 7.92 Description The issue concerns the Hasplm cookie, which lacks the 'HttpOnly' flag, allowing malicious javascript to steal it. Recommendations For versions prior to 7.92, consider setting the...

PT-2019-18963

Name of the Vulnerable Software and Affected Versions Gemalto Admin Control Center versions prior to 7.92 Description The issue allows an attacker to perform a man-in-the-middle MITM attack. This is due to the use of cleartext HTTP to communicate with www3.safenet-inc.com for obtaining language...

CVE-2019-8282: Channel Accessible by Non-Endpoint

Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle MITM attack and replace original language pack by malicious one...

CVE-2019-8283: Sensitive Cookie Without 'HttpOnly' Flag

Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it...