CVE-2014-5359

ALTO 7.8CVE-2014-5359 · Published 16/12/2014 · updated 17/06/2026

Em resumo

CVE-2014-5359 é uma vulnerabilidade ALTO (CVSS 7.8) que afeta safenet authentication service outlook web access agent (safenet-inc).
Chance de exploração nos próximos 30 dias (EPSS): 3.8%, maior que 90.1% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
safenet authentication service outlook web access agent safenet-inc	`≤ 1.03.20212`	No fix yet

Description

Directory traversal vulnerability in SafeNet Authentication Service (SAS) Outlook Web Access Agent (formerly CRYPTOCard) before 1.03.30109 allows remote attackers to read arbitrary files via a .. (dot dot) in the GetFile parameter to owa/owa.

References

appcheck-ng.com/safenet-sas-owa-agent-directory-traversal-vulnerability · Exploit
safenet-inc.com/technical-support/security-updates · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free