CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

Code injection

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31224

The connected Red Hat advisory confirms CVE-2021-31224 affects SES Evolution prior to version 2.1.0. The vulnerability allows a user with read-only access to security policies to duplicate an existing policy, effectively bypassing intended policy immutability. The root cause is a permission/logic...

CVE-2021-31224

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...

CVE-2021-35957

CVE-2021-35957 affects Stormshield Endpoint Security Evolution 2.0.0–2.0.2. The issue is a local-privilege concern where an attacker with local access can replace Visual C++ runtime DLLs in %WINDIR%\system32 with malicious versions, undermining the intended defense. Root cause: insufficient prote...

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31225

CVE-2021-31225 affects Stormshield SES Evolution prior to 2.1.0. The issue allows deleting resources not currently in use by any security policy by leveraging access to a computer with the administration console installed. The impact relates to resource deletion with partial integrity and availab...

PT-2021-19210

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows an attacker with access to a computer having the administration console installed to delete certain resources not currently in use by any security policy. Recommendations For...

PT-2021-19208

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows unauthorized access to certain parts of a security policy by exploiting access to a computer with the administration console installed. Recommendations For SES Evolution versio...

PT-2021-19209

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows an attacker to duplicate an existing security policy by exploiting the access of a user with read-only access to security policies. Recommendations For versions prior to 2.1.0,...

PT-2021-19207

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows updating some parts of a security policy by leveraging access to a computer having the administration console installed. Recommendations For versions prior to 2.1.0, update to...

PT-2021-19205

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows modification of security policies by exploiting the access of a user with read-only access to security policies. Recommendations For versions prior to 2.1.0, update to version...

CVE-2021-31225: Undefined Security Weakness

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-35957: Uncontrolled Search Path Element

Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs in %WINDIR%\system32 with malicious ones...

PT-2021-21078

Name of the Vulnerable Software and Affected Versions: Stormshield Endpoint Security Evolution versions 2.0.0 through 2.0.2 Description: The issue concerns local administrators who can replace the Visual C++ runtime DLLs in %WINDIR%system32 with malicious ones, bypassing the intended defense...

CVE-2021-31221: Undefined Security Weakness

SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31224: Undefined Security Weakness

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...

CVE-2021-31220: Undefined Security Weakness

SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies...