Gemalto
25 CVEs across 22 Gemalto products. Browse Gemalto vulnerabilities, severities, and proof-of-concept exploits.
Gemalto products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18232 | High | 7.8 | 2019-12-11 | SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. Thi… |
CVE-2019-8283 | Medium | 6.5 | 2019-06-07 | Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it. |
CVE-2019-8282 | Medium | 5.3 | 2019-06-07 | Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows at… |
CVE-2019-9158 | Medium | 5.7 | 2019-06-05 | Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control. |
CVE-2019-9157 | Medium | 5.7 | 2019-06-05 | Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure. |
CVE-2019-9156 | High | 8.0 | 2019-06-05 | Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection. |
CVE-2019-6534 | High | 7.8 | 2019-04-11 | The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker t… |
CVE-2018-15492 | High | 7.5 | 2018-08-18 | A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification. |
CVE-2018-8900 | Medium | 6.1 | 2018-05-02 | The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web… |
CVE-2018-6305 | High | 7.5 | 2018-03-13 | Denial of service in Gemalto's Sentinel LDK RTE version before 7.65 |
CVE-2018-6304 | High | 7.5 | 2018-03-13 | Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial of service |
CVE-2015-7967 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable modules, which allows loc… |
CVE-2015-7966 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to… |
CVE-2015-7965 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to… |
CVE-2015-7964 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain… |
CVE-2015-7963 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gai… |
CVE-2015-7962 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local us… |
CVE-2015-7961 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local u… |
CVE-2015-7598 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local u… |
CVE-2015-7597 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain priv… |
CVE-2015-7596 | High | 7.8 | 2018-03-02 | SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installation directories and executable modules, which allow… |
CVE-2017-12822 | Critical | 9.9 | 2017-10-04 | Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to ne… |
CVE-2017-12821 | Critical | 9.8 | 2017-10-04 | Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution. |
CVE-2017-12820 | High | 7.5 | 2017-10-04 | Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 lead… |
CVE-2017-12819 | Critical | 9.8 | 2017-10-04 | Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior… |
CVE-2017-12818 | High | 7.5 | 2017-10-04 | Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denia… |
CVE-2017-11498 | High | 7.5 | 2017-10-03 | Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut… |
CVE-2017-11497 | Critical | 9.8 | 2017-10-03 | Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers t… |
CVE-2017-11496 | Critical | 9.8 | 2017-10-03 | Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers t… |
CVE-2017-6953 | High | 7.8 | 2017-05-08 | Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields. There may be a risk of… |
CVE-2015-5464 | | 2015-07-22 | The Gemalto SafeNet Luna HSM allows remote authenticated users to bypass intended key-export restrictions by leveraging (1) crypto-user or (2) crypto-officer a… |