Gemalto Sentinel UltraPro ICSA-19-073-02 Security Vulnerability

Bugtraq ID:	107415
Class:	Access Validation Error
CVE:	CVE-2019-6534
Remote:	No
Local:	Yes
Published:	Mar 14 2019 12:00AM
Updated:	Mar 14 2019 12:00AM
Credit:	ADLab of Venustech
Vulnerable:	Gemalto SentinelUltraPro 1.3.2 Gemalto SentinelUltraPro 1.3.1 Gemalto SentinelUltraPro 1.3
Not Vulnerable:	Gemalto SentinelUltraPro 1.3.3

Gemalto Sentinel UltraPro ICSA-19-073-02 Security Vulnerability

Gemalto Sentinel UltraPro is prone to a security vulnerability.

Attackers can exploit this issue to execute arbitrary code or bypass certain security restrictions and perform unauthorized actions.

Sentinel UltraPro Client Library ux32w.dll versions 1.3.0, 1.3.1, and 1.3.2 are vulnerable.

Gemalto Sentinel UltraPro ICSA-19-073-02 Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Gemalto Sentinel UltraPro ICSA-19-073-02 Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Gemalto Sentinel UltraPro ICSA-19-073-02 Security Vulnerability

References:

• Gemalto Homepage (Gemalto )
  
• Advisory (ICSA-19-073-02) Gemalto Sentinel UltraPro (ICS-CERT)