Ting Meng Yean

Researcher fromSEC Consult Vulnerability Lab
#13864of 53,633
19.4Total CVSS
Vulnerabilities · 3
Medium
2
High
1
PT-2019-19400
8.0
2019-06-05
Gemalto · Gemalto Ds3 Authentication Server · CVE-2019-9156
**Name of the Vulnerable Software and Affected Versions** Gemalto DS3 Authentication Server version 2.6.1-SP01 **Description** The issue allows for OS Command Injection, which can potentially be exploited to execute unauthorized commands on the system. **Recommendations** For Gemalto DS3 Authentication Server version 2.6.1-SP01, at the moment, there is no information about a newer version that contains a fix for this issue.
PT-2019-19401
5.7
2019-06-05
Gemalto · Gemalto Ds3 Authentication Server · CVE-2019-9157
**Name of the Vulnerable Software and Affected Versions** Gemalto DS3 Authentication Server version 2.6.1-SP01 **Description** The issue allows for Local File Disclosure. **Recommendations** For Gemalto DS3 Authentication Server version 2.6.1-SP01, update to a version that fixes this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2019-19402
5.7
2019-06-05
Gemalto · Gemalto Ds3 Authentication Server · CVE-2019-9158
**Name of the Vulnerable Software and Affected Versions** Gemalto DS3 Authentication Server version 2.6.1-SP01 **Description** The issue is related to Broken Access Control. **Recommendations** For Gemalto DS3 Authentication Server version 2.6.1-SP01, update to a version that fixes the Broken Access Control issue.