CVE-2021-42810
19.01.2022, 18:15
A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed.
| Vendor | Product | Version |
|---|---|---|
| thalesgroup | safenet_authentication_service_remote_desktop_gateway | 𝑥 ≤ 2.0.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-336 - Same Seed in Pseudo-Random Number Generator (PRNG)A Pseudo-Random Number Generator (PRNG) uses the same seed each time the product is initialized.
- CWE-335 - Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)The software uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.
References