Access Control Flaw in SES Evolution by Stormshield
CVE-2021-31224

3.5LOW

Key Information:

Vendor

Stormshield

Status
Endpoint Security
Vendor
CVE Published:
13 July 2021

What is CVE-2021-31224?

SES Evolution versions prior to 2.1.0 have a vulnerability that allows users with read-only access to duplicate existing security policies. This flaw can lead to unauthorized modifications and potential compromise of security configurations, underscoring the importance of maintaining strict access controls to sensitive information.

References

https://advisories.stormshield.eu
x_refsource_MISC
https://advisories.stormshield.eu/2021-026/
x_refsource_MISC

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.