Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9j35-h8v6-5943

Опубликовано: 27 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.

EPSS

Процентиль: 27%
0.00095
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 4.3
nvd
больше 2 лет назад

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.

EPSS

Процентиль: 27%
0.00095
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-732