What the vulnerability does

01Description

Gemalto Admin Control Center, all versions prior to 7.92, uses cleartext HTTP to communicate with www3.safenet-inc.com to obtain language packs. This allows attacker to do man-in-the-middle (MITM) attack and replace original language pack by malicious one.

Key dates

02Disclosure timeline

June 7, 2019 CVE published
August 4, 2024 Record updated