Gemalto: >> Sentinel Ldk >> 6.55 Security Vulnerabilities
Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle (MITM) attack and replace original language pack by malicious one.
CVSS Score
5.3
EPSS Score
0.001
Published
2019-06-07
Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it.
CVSS Score
6.5
EPSS Score
0.003
Published
2019-06-07