Weak Entropy in SafeNet Agent for Windows Logon Exposes User Credentials

CVE-2021-42138

What is CVE-2021-42138?

The SafeNet Agent for Windows Logon is susceptible to a vulnerability where weak entropy can be exploited by local users. This weakness enables unauthorized access to the encrypted credentials of any user on the affected system. If successfully exploited, an attacker could compromise user accounts and sensitive data, highlighting the importance of implementing strong entropy measures to secure credential storage effectively.

References