Vulnerabilities > Gemalto > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-12-11 CVE-2019-18232 Link Following vulnerability in Gemalto Sentinel LDK License Manager
SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service.
local
low complexity
gemalto CWE-59
4.6
2019-06-07 CVE-2019-8283 Incorrect Permission Assignment for Critical Resource vulnerability in Gemalto Sentinel LDK
Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag.
network
gemalto CWE-732
4.3
2019-06-05 CVE-2019-9156 OS Command Injection vulnerability in Gemalto Ezio DS3 Server 2.6.1
Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.
low complexity
gemalto CWE-78
5.2
2018-08-18 CVE-2018-15492 Asymmetric Resource Consumption (Amplification) vulnerability in Gemalto Sentinel License Manager 8.5.3.2403/8.5.3.35
A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification.
network
low complexity
gemalto CWE-405
5.0
2018-05-02 CVE-2018-8900 Cross-site Scripting vulnerability in Gemalto Sentinel LDK RTE
The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center (ACC) for cross-site scripting (XSS) vulnerability.
network
gemalto CWE-79
4.3
2018-03-13 CVE-2018-6305 Unspecified vulnerability in Gemalto Sentinel LDK RTE
Denial of service in Gemalto's Sentinel LDK RTE version before 7.65
network
low complexity
gemalto
5.0
2018-03-13 CVE-2018-6304 Out-of-bounds Write vulnerability in Gemalto Sentinel LDK RTE
Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service
network
low complexity
gemalto CWE-787
5.0
2018-03-02 CVE-2015-7967 Permissions, Privileges, and Access Controls vulnerability in Gemalto Safenet Authentication Service for Citrix web Interface Agent
SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
local
low complexity
gemalto CWE-264
4.6
2018-03-02 CVE-2015-7966 Permissions, Privileges, and Access Controls vulnerability in Gemalto Safenet Authentication Service Windows Logon Agent
SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module, a different vulnerability than CVE-2015-7965.
local
low complexity
gemalto CWE-264
4.6
2018-03-02 CVE-2015-7965 Permissions, Privileges, and Access Controls vulnerability in Gemalto Safenet Authentication Service Windows Logon Agent
SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module, a different vulnerability than CVE-2015-7966.
local
low complexity
gemalto CWE-264
4.6