Weak ACL in SafeNet Authentication Service IIS Agent Allows Privilege Escalation via Executable Modification

CVE-2015-7597 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

SafeNet Authentication Service IIS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.

Learn more about our Cis Benchmark Audit For Microsoft Iis.