CVE-2019-18232: SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected
CVE-2019-18232 is a high-severity flaw (CVSS 7.8) affecting sentinel ldk license manager. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. This vulnerability could also be used by an attacker to execute a malicious DLL, which could impact the integrity and avail
Why this priority
- High severity
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 63%) |
| CISA exploited list | No |
| Weakness | CWE-59 |
| Published | 2019-12-11 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2019-18232?
sentinel ldk license manager: upgrade to 7.101. Exact commands for each OS are on this page.
Is CVE-2019-18232 being exploited?
CVE-2019-18232 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2019-18232 affect?
CVE-2019-18232 affects sentinel ldk license manager. Severity is high (CVSS 7.8). SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or
How urgent is CVE-2019-18232?
Priority 41/100. High severity; On your watchlist