PT-2023-19041 · Stormshield · Stormshield Endpoint Security

Published 2023-05-30 · Updated 2025-01-14 · CVE-2023-23561

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Stormshield Endpoint Security versions 2.3.0 through 2.3.2

Description The issue allows authenticated users to read sensitive information due to incorrect access control.

Recommendations For versions 2.3.0 through 2.3.2, update to a version that fixes the incorrect access control issue to prevent authenticated users from reading sensitive information.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2023-23561

Affected Products

Stormshield Endpoint Security

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-23561 · Security Note
• https://advisories.stormshield.eu · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-23561 · Vendor Advisory
• https://advisories.stormshield.eu/2023-001 · Vendor Advisory
• https://t.me/cvenotify/51410 · Telegram Post