gemalto vulnerabilities

Recent CVEs affecting gemalto products. 25 tracked.

gemalto has 25 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 11. Most recent: 2019-12-11. Highest priority: CVE-2017-11497 (score 62/100).

CVE-2019-9158 MEDIUM 5.7 UPGRADE Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control.
CVE-2019-9157 MEDIUM 5.7 UPGRADE Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.
CVE-2019-9156 HIGH 8.0 UPGRADE Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.
CVE-2019-8283 MEDIUM 6.5 UPGRADE Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag
CVE-2019-8282 MEDIUM 5.3 UPGRADE Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet
CVE-2019-6534 HIGH 7.8 DOWNGRADE The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versi
CVE-2019-18232 HIGH 7.8 UPGRADE SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected
CVE-2018-8900 MEDIUM 6.1 UPGRADE The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.8
CVE-2018-6305 HIGH 7.5 UPGRADE Denial of service in Gemalto's Sentinel LDK RTE version before 7.65
CVE-2018-6304 HIGH 7.5 UPGRADE Stack overflow in custom XML-parser in Gemalto's Sentinel LDK RTE version before 7.65 leads to remote denial o
CVE-2018-15492 HIGH 7.5 UPGRADE A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403
CVE-2017-6953 HIGH 7.8 UPGRADE Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register
CVE-2017-11498 HIGH 7.5 DOWNGRADE Buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.10 to S
CVE-2017-11497 CRITICAL 9.8 DOWNGRADE Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.1
CVE-2017-11496 CRITICAL 9.8 DOWNGRADE Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.1
CVE-2015-7967 HIGH 7.8 MITIGATE SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation dir
CVE-2015-7966 HIGH 7.8 MITIGATE SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories an
CVE-2015-7965 HIGH 7.8 MITIGATE SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories an
CVE-2015-7964 HIGH 7.8 MITIGATE SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and exec
CVE-2015-7963 HIGH 7.8 MITIGATE SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and ex
CVE-2015-7962 HIGH 7.8 MITIGATE SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation director
CVE-2015-7961 HIGH 7.8 MITIGATE SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directo
CVE-2015-7598 HIGH 7.8 MITIGATE SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directo
CVE-2015-7597 HIGH 7.8 MITIGATE SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executab
CVE-2015-7596 HIGH 7.8 MITIGATE SafeNet Authentication Service End User Software Tools for Windows uses a weak ACL for unspecified installatio

FAQ

How do I fix gemalto vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gemalto being exploited right now?

None of the tracked gemalto CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gemalto CVE should I patch first?

CVE-2017-11497 currently ranks highest (62/100): Stack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP SRM 2.1.

Products

RSS feed for gemalto · ← Back to latest CVEs