CVE-2021-38137

2021-08-0614:01:30

mitre

www.cve.org

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role.

References

www.corero.com/blog/data-sheets-corero-securewatch-managed-services/

www.shielder.it/advisories/corero_secure_watch_managed_services-multiple-broken-access-control/