Administrative Access to Backups via Offline Analysis
CVE-2024-5264

6.5MEDIUM

Key Information:

Vendor

Thales

Status
Luna Eft
Vendor
CVE Published:
23 May 2024

What is CVE-2024-5264?

Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis

Affected Version(s)

Luna EFT Appliance 2.1.0

References

https://supportportal.thalesgroup.com/csm?id=kb_article_v...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Cory Whitesell, Sr. Security Engineer, Transaction Network Services
.