CVE-2019-18232
High
Description
SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. This vulnerability could also be used by an attacker to execute a malicious DLL, which could impact the integrity and availability of the system.
SeverityHigh
CVSS7.8
Exploit probability—
ProductGemalto Sentinel Ldk License Manager
PublishedDec 11, 2019
First seenDec 11, 2019
Weakness typeCWE-59Improper link resolution
How to fix
Update
- gemalto sentinel_ldk_license_manager7.101 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gemalto sentinel_ldk_license_manager | v < 7.101 | 7.101 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.