PT-2024-35404 · Thales · Thales Luna Eft

Published 2024-05-23 · Updated 2024-06-21 · CVE-2024-5264

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Thales Luna EFT versions 2.1 and above

Description The issue allows a user with administrative console access to access backups taken via offline analysis using Network Transfer with AES KHT.

Recommendations For Thales Luna EFT versions 2.1 and above, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-338

Related Identifiers

CVE-2024-5264

Affected Products

Thales Luna Eft

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-5264 · Security Note
• https://osv.dev/vulnerability/CVE-2024-5264 · Vendor Advisory
• https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=50da3cd9c302c218204e2a6ce00131b9&sysparm_article=KB0028531 · Note
• https://t.me/cvenotify/80843 · Telegram Post
• https://t.me/cvenotify/84046 · Telegram Post