Skip to content
OpenAdvisories

Vendor

Thales

10 known vulnerabilities.

5 results · Clear filters · Feed

  • Medium 5.9

    Network Key Transfer with AES KHT vulnerability in Luna EFT

    Network Transfer with AES KHT in Thales Luna EFT 2.1 and above allows a user with administrative console access to access backups taken via offline analysis

  • Medium 5.7

    Improper securing of log directory may allow a denial of service

    Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local privilege escalation.

  • Medium 5.7

    XSS vulnerability in Citadel

    The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.

  • Medium 6.5

    The Sentinel Protection Installer 7.7.0 creates files and directory with all privileges granting any user full permissions.

    Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges.

  • Medium 6.5

    The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library

    Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code.