Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.
CVSS Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NGemalto Ezio Ds3 Server
APPGemalto< 3.1.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
Related vulnerabilities
CVE-2019-9156HIGH8.0same product
Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.
CVE-2019-9158MEDIUM5.7same product
Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control.
CVE-2017-11496CRITICAL9.8PL ✓same vendor
Stack buffer overflow w Gemalto Sentinel LDK umożliwiający zdalne wykonanie kodu
CVE-2017-11497CRITICAL9.8PL ✓same vendor
Stack buffer overflow w Gemalto Sentinel LDK — RCE przez złośliwy pakiet językowy
CVE-2019-18232HIGH7.8same vendor
SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected...