PT-2019-18963
CVE-2019-8282
·
Published
2019-06-07
·
Updated
2020-10-22
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Gemalto Admin Control Center versions prior to 7.92
Description
The issue allows an attacker to perform a man-in-the-middle (MITM) attack. This is due to the use of cleartext HTTP to communicate with www3.safenet-inc.com for obtaining language packs, which enables the attacker to replace the original language pack with a malicious one.
Recommendations
For versions prior to 7.92, update to version 7.92 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾