CVE-2023-35800

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions

published June 27, 2023

CVSS
—
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.4th percentile
Published
2023-06-27T00:00Z
EPSS history
Timeline
  • 27 JUN 00:00Z
    Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions
    cvelistv5