CVE-2015-7359
First published: Mon Oct 02 2017(Updated: )
The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, do not check the impersonation level of impersonation tokens, which allows local users to impersonate a user at SecurityIdentify level and gain access to other users' mounted encrypted volumes.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| nCipher | <=0.7.5.0 | |
| VeraCrypt | <=1.14 | |
| TrueCrypt | =7.0 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/133877/Truecrypt-7-Privilege-Escalation.html
- http://www.openwall.com/lists/oss-security/2015/09/22/7
- http://www.openwall.com/lists/oss-security/2015/09/24/3
- https://code.google.com/p/google-security-research/issues/detail?id=537
- https://veracrypt.codeplex.com/wikipage?title=Release%20Notes
Frequently Asked Questions
What is the severity of CVE-2015-7359?
CVE-2015-7359 has a medium severity rating due to its potential for privilege escalation.
How do I fix CVE-2015-7359?
To fix CVE-2015-7359, update to the latest version of VeraCrypt (1.15 or later) or use an alternative disk encryption software.
Which software versions are affected by CVE-2015-7359?
CVE-2015-7359 affects TrueCrypt 7.0, VeraCrypt versions before 1.15, and CipherShed versions up to 0.7.5.0.
What is the impact of CVE-2015-7359?
CVE-2015-7359 allows local users to impersonate a user at SecurityIdentify level, leading to unauthorized access to protected volumes.
Is there any workaround for CVE-2015-7359?
A possible workaround for CVE-2015-7359 is to restrict access to the affected software by using account permissions and policies.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/ciphershed
- canonical/ncipher
- version/ncipher/0.7.5.0
- vendor/idrix
- canonical/veracrypt
- version/veracrypt/1.14
- vendor/truecrypt
- canonical/truecrypt
- version/truecrypt/7.0
- vendor/microsoft
- canonical/microsoft windows