This vulnerability is handled as CVE-2019-18232 since. This vulnerability could also be used by an attacker to execute a malicious DLL, which could impact the integrity and availability of the system. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service.

Impacted is confidentiality, integrity, and availability. The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. Using CWE to declare the problem leads to CWE-59. The manipulation with an unknown input leads to a link following vulnerability. Affected by this issue is an unknown part of the component Service Handler. A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability was found in Safenet Sentinel LDK License Manager on Windows. The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time.

cpe:2.Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.

SafeNet Sentinel LDK License Manager: before 7.101 This vulnerability can also be used by an attacker to execute a malicious DLL, which could impact the integrity and availability of the system. A local user can create, write, and/or delete files in system folder using symbolic links and escalate privileges on the target system. The vulnerability exists when the affected product is configured as a service due to improper handling symbolic links. The vulnerability allows a local user to escalate privileges on the system. CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Sentinel local license manager