CVE-2021-42138

Published: Dec 20, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.

Affected (1)

Products: Thalesgroup: Safenet Windows Logon Agent

Thalesgroup

1 product

Safenet Windows Logon Agent

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Thalesgroup Safenet Windows Logon Agent	Before 3.4.4

Related CWEs

CWE-331

Insufficient Entropy

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

References (6)

https://cpl.thalesgroup.com/support/security-updates

Source: psirt@thalesgroup.com

Vendor Advisory

https://supportportal.gemalto.com/csm?sys_kb_id=a52bd13adbff7010f0e322080596194a&id=kb_article_view&sysparm_rank=1&sysparm_tsqueryId=b3bdd932db33b010f0e3220805961955

Source: psirt@thalesgroup.com

Permissions Required

https://supportportal.gemalto.com/csm?sys_kb_id=e8397662dbb7fc10520c4705059619eb&id=kb_article_view&sysparm_rank=2&sysparm_tsqueryId=b3bdd932db33b010f0e3220805961955

Source: psirt@thalesgroup.com

Permissions Required

https://cpl.thalesgroup.com/support/security-updates

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://supportportal.gemalto.com/csm?sys_kb_id=a52bd13adbff7010f0e322080596194a&id=kb_article_view&sysparm_rank=1&sysparm_tsqueryId=b3bdd932db33b010f0e3220805961955

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

https://supportportal.gemalto.com/csm?sys_kb_id=e8397662dbb7fc10520c4705059619eb&id=kb_article_view&sysparm_rank=2&sysparm_tsqueryId=b3bdd932db33b010f0e3220805961955

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

Timeline

No history available yet.