Filtered by vendor Gemalto Subscriptions
Filtered by product Sentinel Ldk Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-8283 1 Gemalto 1 Sentinel Ldk 2024-11-21 6.5 Medium
Hasplm cookie in Gemalto Admin Control Center, all versions prior to 7.92, does not have 'HttpOnly' flag. This allows malicious javascript to steal it.
CVE-2019-8282 1 Gemalto 1 Sentinel Ldk 2024-11-21 5.3 Medium
Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle (MITM) attack and replace original language pack by malicious one.