PT-2021-23556 · Safenet · Safenet Agent For Windows Logon

Compass-Security · Published 2021-12-20 · Updated 2022-01-03 · CVE-2021-42138

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SafeNet Agent for Windows Logon (affected versions not specified)

Description A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-331

Related Identifiers

CVE-2021-42138

Affected Products

Safenet Agent For Windows Logon

References · 5

• https://osv.dev/vulnerability/CVE-2021-42138 · Vendor Advisory
• https://cpl.thalesgroup.com/support/security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42138 · Security Note
• https://supportportal.gemalto.com/csm?sys_kb_id=a52bd13adbff7010f0e322080596194a&id=kb_article_view&sysparm_rank=1&sysparm_tsqueryId=b3bdd932db33b010f0e3220805961955 · Note
• https://supportportal.gemalto.com/csm?sys_kb_id=e8397662dbb7fc10520c4705059619eb&id=kb_article_view&sysparm_rank=2&sysparm_tsqueryId=b3bdd932db33b010f0e3220805961955 · Note