CVE-2021-31223

SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31221

SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31223

SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31220

SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies...

CVE-2021-31224

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...

Design/Logic Flaw

SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed...

Security feature bypass

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...

Security feature bypass

SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies...

Design/Logic Flaw

SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31221

SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31221

The vulnerability CVE-2021-31221 affects Stormshield SES Evolution prior to version 2.1.0. Affected component is the SES Evolution security policy handling, where an attacker with access to a workstation running the administration console can delete parts of the security policy due to a likely au...

CVE-2021-31222

CVE-2021-31222 affects Stormshield SES Evolution prior to 2.1.0. The issue is an authorization flaw that, when an administrator console is accessible, allows updating some security policies on the target system. Impact is defined as the ability to modify policy settings via a compromised access p...

CVE-2021-31222

SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31223

CVE-2021-31223 affects SES Evolution (French Stormshield) before version 2.1.0. An unauthorized read of parts of a security policy is possible when an infected computer has the administration console installed, enabling a local/near-local attacker to access policy details. The root cause is an ac...

CVE-2021-31223

SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31220

SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies...

CVE-2021-31220

CVE-2021-31220 affects Stormshield SES Evolution prior to 2.1.0. A processing logic error allows a user with read-only privileges to modify security policies, i.e., the vulnerability enables policy changes despite limited access. Affected products/versions are: SES Evolution

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

Code injection

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...