CVE-2021-42138: Thalesgroup Safenet Windows Logon Agent

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A user of a machine protected by SafeNet Agent for Windows Logon may leverage weak entropy to access the encrypted credentials of any or all the users on that machine.

Affected products

• Thalesgroup Safenet Windows Logon Agent: before 3.4.4 (fixed in 3.4.4)

Published 2021-12-20. Last modified 2026-06-17.