Thales Safenet Authentication Client (SAC) for Linux and...
High severity
Unreviewed
Published
Jun 25, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Jun 24, 2022
Published to the GitHub Advisory Database
Jun 25, 2022
Last updated
Jan 27, 2023
Thales Safenet Authentication Client (SAC) for Linux and Windows through 10.7.7 creates insecure temporary hid and lock files allowing a local attacker, through a symlink attack, to overwrite arbitrary files, and potentially achieve arbitrary command execution with high privileges.
References