Vulnerability · Published Jun 10, 2022 · Assigned by THA-PSIRT
CVE-2021-42811Vulnerability in SafeNet KeySecure
Low 3.3
In plain English
A low-severity path traversal in SafeNet KeySecure from Thales DIS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.6%top 53.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrary files from the underlying system on which the product is deployed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Thales DIS | SafeNet KeySecure | 8.12.4 – through 8.12.4 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N