CVE-2021-42138

Medium

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or…

THA-PSIRT·CWE-331·Published 2021-12-20

CVSS

6.5

EPSS

0.01

KEV

Exploits

cve.orgen

167 chars

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.

NVDen

167 chars

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.

Un usuario de una máquina protegida por SafeNet Agent for Windows Logon podría aprovechar la entropía débil para acceder a las credenciales cifradas de alguno o todos los usuarios de esa máquina

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:P/I:N/A:N
3.1	Primary	cve.org	7.2	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
3.1	Primary	cve.org	7.2	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
3.1	Secondary	NVD	7.2	0.8	5.8	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N