Medium severity · published Jun 27, 2023
CVE-2023-35800
Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions
4.3
CVSS
0.4%
EPSS
No
On KEV
Description
Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Endpoint Security · Stormshield
2.0.0 through 2.4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-35800
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-35800
Vendor Advisory
https://advisories.stormshield.eu
Vendor Advisory
https://advisories.stormshield.eu/2023-021/
More from Endpoint Security
9.8
CVE-2021-45090
Stormshield Endpoint Security before 2.1.2 allows remote code execution
7.3
CVE-2021-31225
SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console…
6.7
CVE-2021-35957
Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs (in…
5.9
CVE-2022-4304
Timing Oracle in RSA Decryption
5.7
CVE-2021-31223
SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed