Description
A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log
directory.
This issue affects SAC releases up to and including 10.9 R3 GA (build 10.9.7449).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Thalesgroup | Safenet Authentication Client Service | ≤ 10.9.7449 | — |