Incorrect Access Control in Stormshield Endpoint Security by Stormshield
CVE-2023-23562

4.3MEDIUM

Key Information:

Vendor

Stormshield

Status
Endpoint Security
Vendor
CVE Published:
31 May 2023

What is CVE-2023-23562?

Stormshield Endpoint Security versions 2.3.0 to 2.3.2 exhibit incorrect access control vulnerabilities, enabling authenticated users to modify global parameters without proper authorization. This flaw could lead to unauthorized changes that may compromise security settings, affecting the integrity of the endpoint protection offered by the product.

References

https://advisories.stormshield.eu
https://advisories.stormshield.eu/2023-002/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.