CVEvulnerability
CVE-2023-35799
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-732
Description
Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary files with local system privileges.
Affected configurations
• stormshield endpoint security (>= 2.0.0 <= 2.3.2)
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- https://advisories.stormshield.eu Vendor Advisory
- https://advisories.stormshield.eu/2023-022/ Vendor Advisory
- https://advisories.stormshield.eu Vendor Advisory
- https://advisories.stormshield.eu/2023-022/ Vendor Advisory