Threats tagged 'ghsa-42cv-8vrh-mf2f'

A time-of-check to time-of-use (TOCTOU) race condition exists in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function. This vulnerability allows an authenticated local user without administrator privileges to redirect a privileged file deletion operation outside the intended log directory. The issue affects SAC versions up to and including 10.9 R3 GA (build 10.9.7449).