Aladdin safenet hasp software#
The affected products, Sentinel HASP, formerly Aladdin HASP SRM, are the digital license manager keys used to enforce digital licenses that enable the use of software or hardware. SafeNet is a US-based company that creates products for software protection and license management. ICS-CERT recommends that organizations evaluate the impact of this vulnerability based on their operational environment, architecture, and product implementation.
Impact to individual organizations depends on many factors that are unique to each organization. Successful exploitation of this vulnerability allows an attacker to change the code in a configuration file. Sentinel HASP Run-time installers older than Version 6.x.SafeNet Sentinel HASP SDK releases older than Version 5.11.Penagos has tested the updated version and validates that it resolves the vulnerability. ICS-CERT has coordinated the researcher’s vulnerability report with SafeNet, and SafeNet has produced an updated version that mitigates this vulnerability. Security researcher Carlos Mario Penagos Hollman of Synapse-labs has identified an input sanitization vulnerability in SafeNet Sentinel HASP Software Rights Management (HASP-SRM) license management application.
Aladdin safenet hasp install#
This web page release was delayed to allow users time to download and install the update. ICS-CERT originally released advisory ICSA-11-314-01P on the US-CERT secure portal on November 14, 2011.
0 kommentar(er)
