CVE-2015-7359: High severity ncipher vulnerability
The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, do not check the impersonation level of impersonation tokens, which allows local users to impersonate a user at SecurityIdentify level and gain access to other users' mounted encrypted volumes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7359?
CVE-2015-7359 has a medium severity rating due to its potential for privilege escalation.
How do I fix CVE-2015-7359?
To fix CVE-2015-7359, update to the latest version of VeraCrypt (1.15 or later) or use an alternative disk encryption software.
Which software versions are affected by CVE-2015-7359?
CVE-2015-7359 affects TrueCrypt 7.0, VeraCrypt versions before 1.15, and CipherShed versions up to 0.7.5.0.
What is the impact of CVE-2015-7359?
CVE-2015-7359 allows local users to impersonate a user at SecurityIdentify level, leading to unauthorized access to protected volumes.
Is there any workaround for CVE-2015-7359?
A possible workaround for CVE-2015-7359 is to restrict access to the affected software by using account permissions and policies.