Improper securing of log directory may allow a denial of service
CVE-2023-2737

5.7MEDIUM

Key Information:

Vendor

Thales

Status
Safenet Authtentication Service Agent
Vendor
CVE Published:
16 August 2023

What is CVE-2023-2737?

Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.

Affected Version(s)

SafeNet Authtentication Service Agent Windows SafeNet Authentication Service Agent < 3.6.1

References

https://supportportal.thalesgroup.com/csm?id=kb_article_v...

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Florian Hansemann, https://hansesecure.de
.