7.2
CVE-2021-42138
- EPSS 0.19%
- Veröffentlicht 20.12.2021 21:15:08
- Zuletzt bearbeitet 21.11.2024 06:27:20
- Quelle psirt@thalesgroup.com
- Teams Watchlist Login
- Unerledigt Login
A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Thalesgroup ≫ Safenet Windows Logon Agent Version < 3.4.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.407 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 3.5 | 6.8 | 2.9 |
AV:N/AC:M/Au:S/C:P/I:N/A:N
|
| psirt@thalesgroup.com | 7.2 | 0.8 | 5.8 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
|
CWE-331 Insufficient Entropy
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.