PT-2023-25322 · Stormshield · Stormshield Endpoint Security Evolution

CVE-2023-35800 · Publicado 2023-06-27 · Atualizado 2023-07-05

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Stormshield Endpoint Security Evolution versions 2.0.0 through 2.4.2

Description The issue is related to Insecure Permissions in the Stormshield Endpoint Security Evolution agent directory. An ACL entry allows interactive users to read data that could provide access to information reserved for administrators. This could potentially allow unauthorized access to sensitive information.

Recommendations For Stormshield Endpoint Security Evolution versions 2.0.0 through 2.4.2, consider restricting access to the agent logs displayed in the GUI to prevent interactive users from reading sensitive data until a patch is available. As a temporary workaround, review and modify the ACL entries on the SES Evolution agent directory to ensure that only authorized users have access to the logs.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2023-35800

Produtos afetados

Stormshield Endpoint Security Evolution

Referências · 5

• https://advisories.stormshield.eu/2023-021 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-35800 · Nota de Segurança
• https://t.me/cibsecurity/65581 · Publicação no Telegram
• https://advisories.stormshield.eu · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-35800 · Aviso do Fabricante