CVE-2015-7967

SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module.

• CWE-264

• https://labs.nettitude.com/blog/cve-2015-7596-through-cve-2015-7598-cve-2015-7961-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/Third Party Advisory
• https://labs.nettitude.com/wp-content/uploads/2016/03/160125-1-Gemalto-IDSS-Security-Bulletin-SAS-Agents-Privilege-Escalation.pdfPatch, Third Party Advisory
• https://safenet.gemalto.com/technical-support/security-updates/Vendor Advisory
• https://labs.nettitude.com/blog/cve-2015-7596-through-cve-2015-7598-cve-2015-7961-through-cve-2015-7967-safenet-authentication-service-agent-vulnerabilities/Third Party Advisory
• https://labs.nettitude.com/wp-content/uploads/2016/03/160125-1-Gemalto-IDSS-Security-Bulletin-SAS-Agents-Privilege-Escalation.pdfPatch, Third Party Advisory
• https://safenet.gemalto.com/technical-support/security-updates/Vendor Advisory

Published

Mar 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7961SafeNet Authentication Service Remote Web Workplace Agent us…
• CVE-2015-7962SafeNet Authentication Service for Outlook Web App Agent use…
• CVE-2015-7963SafeNet Authentication Service for AD FS Agent uses a weak A…
• CVE-2015-7964SafeNet Authentication Service for NPS Agent uses a weak ACL…
• CVE-2015-7965SafeNet Authentication Service Windows Logon Agent uses a we…
• CVE-2015-7966SafeNet Authentication Service Windows Logon Agent uses a we…
• CVE-2015-7968nwbc_ext2int in SAP NetWeaver Application Server before Secu…4.3
• CVE-2015-7969Multiple memory leaks in Xen 4.0 through 4.6.x allow local g…
• CVE-2015-7970The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.…
• CVE-2015-7971Xen 3.2.x through 4.6.x does not limit the number of printk …
• CVE-2015-7972The (1) libxl_set_memory_target function in tools/libxl/libx…
• CVE-2015-7973NTP before 4.2.8p6 and 4.3.x before 4.3.90, when configured …6.5