Vulnerabilities > Gemalto > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-06-07 CVE-2019-8283 Incorrect Permission Assignment for Critical Resource vulnerability in Gemalto Sentinel LDK
Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag.
network
low complexity
gemalto CWE-732
6.5
2019-06-07 CVE-2019-8282 Origin Validation Error vulnerability in Gemalto Sentinel LDK
Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs.
network
high complexity
gemalto CWE-346
5.3
2019-06-05 CVE-2019-9158 Authentication Bypass by Capture-replay vulnerability in Gemalto Ezio DS3 Server 2.6.1
Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control.
low complexity
gemalto CWE-294
5.7
2019-06-05 CVE-2019-9157 Path Traversal vulnerability in Gemalto Ezio DS3 Server 2.6.1
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.
low complexity
gemalto CWE-22
5.7
2018-05-02 CVE-2018-8900 Cross-site Scripting vulnerability in Gemalto Sentinel LDK RTE
The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center (ACC) for cross-site scripting (XSS) vulnerability.
network
low complexity
gemalto CWE-79
6.1