CVE-2019-8282CWE-300

Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs

published June 7, 2019

CVSS
—
EPSS
0%
Percentile
34.7
In the wild
Unconfirmed
What it is

Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle (MITM) attack and replace original language pack by malicious one.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00415 · 34.7th percentile
Weakness
CWE-300 · Channel Accessible by Non-Endpoint
Published
2019-06-07T14:21Z
EPSS history
Timeline
  • 07 JUN 14:21Z
    Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs
    cvelistv5