Security Vulnerabilities - CVEs Published In March 2018
SafeNet Authentication Service TokenValidator Proxy Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-03-02
SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-03-02
SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-03-02
SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-03-02
SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-03-02
SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module, a different vulnerability than CVE-2015-7966.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-03-02
SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module, a different vulnerability than CVE-2015-7965.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-03-02
SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.
CVSS Score
7.8
EPSS Score
0.001
Published
2018-03-02
NetIQ eDirectory before 9.0 SP4 did not enforce login restrictions when "ebaclient" was used, allowing unpermitted access to eDirectory services.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-03-02
The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.
CVSS Score
7.5
EPSS Score
0.006
Published
2018-03-02