File Decryption Flaw in SanDisk Secure Access by SanDisk
CVE-2017-16560

4.3MEDIUM

Key Information:

Vendor

Sandisk

Status
Secureaccess
Vendor
CVE Published:
16 November 2017

What is CVE-2017-16560?

SanDisk Secure Access 3.01 contains a vulnerability that leads to the unintentional retention of decrypted copies of encrypted files in a temporary folder. This occurs under specific conditions, such as when a user exits the application while editing a file or if the application unexpectedly crashes. As a result, sensitive data may remain exposed on the disk, posing potential security risks.

References

https://medium.com/%40esterling_/cve-2017-16560-sandisk-s...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.