CVE-2021-42811

Vulnerability in SafeNet KeySecure

CVSS 3.3 LOWEPSS 0.5%CWE-22

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 3.3EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

10 Jun 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Thales DIS · SafeNet KeySecure

References

https://supportportal.thalesgroup.com/csm?id=kb_article_view&sys_kb_id=9278cada973f45509fd638d3f153afff&sysparm_article=KB0025953