Medium · 6.5 CVE-2021-42809 EUVD-2021-29765GHSA-qqf6-7934-8vv8

The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library

Published Dec 20, 2021 · Updated Aug 4, 2024 · Assigned by THA-PSIRT

Vendor: Thales Product: Sentinel Protection Installer

Description

Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code.

Affected products

Vendor	Product	Affected	Fixed
Thales	Sentinel Protection Installer	7.7.0 – ≤ 7.7.0	—

References

https://cpl.thalesgroup.com/fr/software-monetization/security-updates