Design/Logic Flaw

2021-08-0615:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role.

CPENameOperatorVersion
securewatch_managed_serviceseq9.7.2.0020

CPE	Name	Operator	Version
	securewatch_managed_services	eq	9.7.2.0020

References

www.corero.com/blog/data-sheets-corero-securewatch-managed-services/

www.shielder.it/advisories/corero_secure_watch_managed_services-multiple-broken-access-control/