Skip to content
OpenAdvisories
High WID-SEC-2026-0621 5 CVEs

DriveLock: Mehrere Schwachstellen

Published Mar 5, 2026 · Updated Jul 29, 2026 · Revision 3 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in DriveLock ausnutzen, um Informationen offenzulegen oder SQL-Injection durchzuführen, was möglicherweise zu einer Privilegienerweiterung führen kann.

Product

DriveLock ist eine IT-Sicherheitslösung, die Endgeräte und Daten durch einen Zero-Trust-Ansatz vor Cyberangriffen schützt.

Vulnerabilities 5

  • High 8.8

    DriveLock SQL Injection Privilege Escalation Vulnerability

    DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the…

  • High 7.5

    DriveLock Directory Traversal Information Disclosure Vulnerability

    DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific…

  • High 7.5

    DriveLock Directory Traversal Information Disclosure Vulnerability

    DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific…

  • Medium 6.5

    DriveLock Directory Traversal Information Disclosure Vulnerability

    DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific fla…

  • Medium 5.3

    DriveLock Directory Traversal Information Disclosure Vulnerability

    DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific…

Revision history

  1. #3

    Referenz(en) aufgenommen: EUVD-2026-50496, EUVD-2026-50495, EUVD-2026-50494, EUVD-2026-50493, EUVD-2026-50492

  2. #2

    CVE's ergänzt

  3. #1

    Initiale Fassung

References