1. Home
  2. CVE Database
  3. CVE-2023-35800
MEDIUM · 4.3

CVE-2023-35800

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interac...

Vulnerability Description

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
StormshieldEndpoint Security>= 2.0.0, <= 2.4.2

Related Weaknesses (CWE)

CWE-732

References

FAQ

What is CVE-2023-35800?

CVE-2023-35800 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interac...

How severe is CVE-2023-35800?

CVE-2023-35800 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-35800?

Check the references section above for vendor advisories and patch information. Affected products include: Stormshield Endpoint Security.