Summary
Ein Angreifer kann mehrere Schwachstellen in DriveLock ausnutzen, um Informationen offenzulegen oder SQL-Injection durchzuführen, was möglicherweise zu einer Privilegienerweiterung führen kann.
Product
DriveLock ist eine IT-Sicherheitslösung, die Endgeräte und Daten durch einen Zero-Trust-Ansatz vor Cyberangriffen schützt.
Vulnerabilities 5
-
High 8.8
DriveLock SQL Injection Privilege Escalation Vulnerability
DriveLock SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific flaw exists within the…
-
High 7.5
DriveLock Directory Traversal Information Disclosure Vulnerability
DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific…
-
High 7.5
DriveLock Directory Traversal Information Disclosure Vulnerability
DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific…
-
Medium 6.5
DriveLock Directory Traversal Information Disclosure Vulnerability
DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is required to exploit this vulnerability. The specific fla…
-
Medium 5.3
DriveLock Directory Traversal Information Disclosure Vulnerability
DriveLock Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of DriveLock. Authentication is not required to exploit this vulnerability. The specific…
Revision history
-
#3
Referenz(en) aufgenommen: EUVD-2026-50496, EUVD-2026-50495, EUVD-2026-50494, EUVD-2026-50493, EUVD-2026-50492
-
#2
CVE's ergänzt
-
#1
Initiale Fassung
References
-
Drivelock Security Bulletin vom 2026-03-05
https://drivelock.help/sb/Content/SecurityBulletins/26-001-DESForwarding.htm
-
Drivelock Security Bulletin vom 2026-03-05
https://drivelock.help/sb/Content/SecurityBulletins/26-002-SQLInjection.htm
-
Drivelock Security Bulletin vom 2026-03-05
https://drivelock.help/sb/Content/SecurityBulletins/26-003-PathValidation.htm