CVE-2021-45090

Stormshield Endpoint Security before 2.1.2 allows remote code execution...

Improper access control

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control...

Remote code execution

Stormshield Endpoint Security before 2.1.2 allows remote code execution...

Improper access control

Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control...

CVE-2021-45090

Stormshield Endpoint Security before 2.1.2 allows remote code execution...

CVE-2021-45090

CVE-2021-45090 affects Stormshield Endpoint Security; versions before 2.1.2 are vulnerable to remote code execution. The root cause is improper handling of externally entered data when constructing code segments. Impact is remote code execution with high confidentiality, integrity, and availabili...

CVE-2021-45089

CVE-2021-45089 affects Stormshield Endpoint Security 2.x (pre-2.1.2) due to Incorrect Access Control. Root cause: improper access control in the product, enabling potential impact on availability. CVSSv3.1 base metrics indicate Avatar: Adjacent, Privileges Required: Low, User Interaction Required...

CVE-2021-45089

Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control...

CVE-2021-45091

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control...

CVE-2021-45091

The CVE-2021-45091 entry concerns Stormshield Endpoint Security, versions 2.1.0 through 2.1.1, with an incorrect access control vulnerability. Available connected documents confirm the affected product and version range but do not disclose technical details about the root cause, specific componen...

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield that stems from incorrect access control in Stormshield Endpoint Security from 2.1.0 to 2.1.1...

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security, the product line of the French company Stormshield for enhanced workstation and server security, has a remote code execution vulnerability in versions prior to 2.1.2, which stems from the process of constructing code segments from externally entered data. network...

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield Endpoint Security that stems from incorrect access controls configured in Stormshield's previous x...

CVE-2021-3959

A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272...

Server side request forgery (ssrf)

A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272...

CVE-2021-3959 Server-Side Request Forgery in Bitdefender GravityZone Update Server in Relay Mode (VA-10145)

A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Bitdefender GravityZone versions prior to 3.3.8.272...

CVE-2021-3959

CVE-2021-3959 describes a Server-Side Request Forgery (SSRF) in the EPPUpdateService of Bitdefender GravityZone. Affected: GravityZone versions prior to 3.3.8.272. The vulnerability allows a proxy of requests to the relay server. The available references indicate no explicit exploit details or in...

Not with a Bang but a Whisper: The Shift to Stealthy C2

As defensive tools have evolved to detect more and more traditional attack techniques, it should come as no surprise that attackers have shifted tactics. This ever-evolving arms race between offensive security toolsets, bespoke advanced persistent threat APT malware and the billion-dollar infosec...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet. It provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A security vulnerability exists in Fortinet FortiClient, which can...

Server side request forgery (ssrf)

A Server-Side Request Forgery SSRF vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security Tools allows an attacker to proxy requests to the relay server. This issue affects: Bitdefender Endpoint Security Tools versions prior to 6.6.27.390; versions prior to 7.1.2.33...