High · 7.2 CVE-2021-42138 EUVD-2021-29121GHSA-5c3c-76cf-7hhm

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or al…

Published Dec 20, 2021 · Updated Aug 4, 2024 · Assigned by THA-PSIRT

Vendor: Thales CPL Product: Safenet Authentication Service

Description

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.

Affected products

Vendor	Product	Affected	Fixed
Thales CPL	Safenet Authentication Service	Windows Logon Agent – < 3.4.4	3.4.4

References

https://supportportal.gemalto.com/csm?sys_kb_id=a52bd13adbff7010f0e322080596194a&id=kb_article_view&sysparm_rank=1&sysparm_tsqueryId=b3bdd932db33b010f0e3220805961955
https://supportportal.gemalto.com/csm?sys_kb_id=e8397662dbb7fc10520c4705059619eb&id=kb_article_view&sysparm_rank=2&sysparm_tsqueryId=b3bdd932db33b010f0e3220805961955
https://cpl.thalesgroup.com/support/security-updates