Back to Database
Status published
High
CVE-2015-7966
SafeNet Authentication Service Windows Logon Agent uses a weak ACL...
Vulnerability Description
SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module, a different vulnerability than CVE-2015-7965.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-7966
Credits & Attribution
No credits recorded in the NVD database.
References
- https://safenet.gemalto.com/technical-support/security-updates/
- https://labs.nettitude.com/blog/cve-2015-7596-through-cve-2015-7598-cve-2015-7961-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/
- https://labs.nettitude.com/wp-content/uploads/2016/03/160125-1-Gemalto-IDSS-Security-Bulletin-SAS-Agents-Privilege-Escalation.pdf
More from gemalto
View All →CVE-2019-9158
Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control....
Medium
5.7
CVE-2019-9157
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure....
Medium
5.7
CVE-2019-9156
Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection....
High
8
CVE-2018-8900
The License Manager service of HASP SRM, Sentinel HASP and...
Medium
6.1
CVE-2018-15492
A vulnerability in the lservnt.exe component of Sentinel License Manager...
High
7.5
Affected Vendor
gemalto
View all reports →Affected Software
safenet authentication service windows logon agent
Vulnerable Versions:
Unknown
Timeline
Official Publish:
March 2nd, 2018
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.