PT-2023-25322 · Stormshield · Stormshield Endpoint Security Evolution

Published 2023-06-27 · Updated 2023-07-05 · CVE-2023-35800

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Stormshield Endpoint Security Evolution versions 2.0.0 through 2.4.2

Description The issue is related to Insecure Permissions in the Stormshield Endpoint Security Evolution agent directory. An ACL entry allows interactive users to read data that could provide access to information reserved for administrators. This could potentially allow unauthorized access to sensitive information.

Recommendations For Stormshield Endpoint Security Evolution versions 2.0.0 through 2.4.2, consider restricting access to the agent logs displayed in the GUI to prevent interactive users from reading sensitive data until a patch is available. As a temporary workaround, review and modify the ACL entries on the SES Evolution agent directory to ensure that only authorized users have access to the logs.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2023-35800

Affected Products

Stormshield Endpoint Security Evolution

References · 5

• https://advisories.stormshield.eu/2023-021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35800 · Security Note
• https://advisories.stormshield.eu · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-35800 · Vendor Advisory
• https://t.me/cibsecurity/65581 · Telegram Post