CVE-2015-7965

SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module, a different vulnerability than CVE-2015-7966.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-03-02

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Safenet Authentication Service Windows Logon Agent (Gemalto)

References

• https://labs.nettitude.com/blog/cve-2015-7596-through-cve-2015-7598-cve-2015-7961-through-cve-2015-7967-safenet-authent…
• https://labs.nettitude.com/wp-content/uploads/2016/03/160125-1-Gemalto-IDSS-Security-Bulletin-SAS-Agents-Privilege-Esca…
• https://safenet.gemalto.com/technical-support/security-updates/