CVE-2011-3339 Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP (formerly Aladdin HASP SRM) run-time installer befo...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP (formerly Aladdin HASP SRM) run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies (7T) IGSS 7 and other products, when Firefox 2.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger write access to a configuration file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 7t igss | = 7 | No fix listed |
| safenet-inc sentinel hasp run-time | <= 5.95 | No fix listed |
| safenet-inc sentinel hasp sdk | <= 5.10 | No fix listed |
References
- www.safenet-inc.com vendor-advisory
- 51028 vdb-entry
- www.us-cert.gov third-party-advisory us-government-resource
- safenet-unspecified-xss(71789) vdb-entry