4.6
CVSSv2

CVE-2019-18232

Published: 11/12/2019 Updated: 19/12/2019
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SafeNet Sentinel LDK License Manager, all versions before 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. This vulnerability could also be used by an malicious user to execute a malicious DLL, which could impact the integrity and availability of the system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gemalto sentinel_ldk_license_manager