CVE-2019-18232

HIGH

SafeNet Sentinel LDK License Manager < 7.101 - Privilege Escalation via Symbolic Link

Title source: llm

Description

SafeNet Sentinel LDK License Manager, all versions prior to 7.101(only Microsoft Windows versions are affected) is vulnerable when configured as a service. This vulnerability may allow an attacker with local access to create, write, and/or delete files in system folder using symbolic links, leading to a privilege escalation. This vulnerability could also be used by an attacker to execute a malicious DLL, which could impact the integrity and availability of the system.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://www.us-cert.gov/ics/advisories/icsa-19-339-01

Scores

CVSS v3 7.8

EPSS 0.0042

EPSS Percentile 33.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-59

Status published

Products (1)

gemalto/sentinel_ldk_license_manager < 7.101

Published Dec 11, 2019

Tracked Since Feb 18, 2026