CVE-2021-31222

CVE-2021-31222 affects Stormshield SES Evolution prior to 2.1.0. The issue is an authorization flaw that, when an administrator console is accessible, allows updating some security policies on the target system. Impact is defined as the ability to modify policy settings via a compromised access p...

CVE-2021-31223

CVE-2021-31223 affects SES Evolution (French Stormshield) before version 2.1.0. An unauthorized read of parts of a security policy is possible when an infected computer has the administration console installed, enabling a local/near-local attacker to access policy details. The root cause is an ac...

CVE-2021-31223

SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31220

CVE-2021-31220 affects Stormshield SES Evolution prior to 2.1.0. A processing logic error allows a user with read-only privileges to modify security policies, i.e., the vulnerability enables policy changes despite limited access. Affected products/versions are: SES Evolution

CVE-2021-31220

SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies...

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

Code injection

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31224

The connected Red Hat advisory confirms CVE-2021-31224 affects SES Evolution prior to version 2.1.0. The vulnerability allows a user with read-only access to security policies to duplicate an existing policy, effectively bypassing intended policy immutability. The root cause is a permission/logic...

CVE-2021-31224

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...

CVE-2021-31225

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed...

CVE-2021-31225

CVE-2021-31225 affects Stormshield SES Evolution prior to 2.1.0. The issue allows deleting resources not currently in use by any security policy by leveraging access to a computer with the administration console installed. The impact relates to resource deletion with partial integrity and availab...

CVE-2021-31224: Undefined Security Weakness

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...

CVE-2021-31222: Undefined Security Weakness

SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed...

PT-2021-19205

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows modification of security policies by exploiting the access of a user with read-only access to security policies. Recommendations For versions prior to 2.1.0, update to version...

PT-2021-19209

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows an attacker to duplicate an existing security policy by exploiting the access of a user with read-only access to security policies. Recommendations For versions prior to 2.1.0,...

PT-2021-19208

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows unauthorized access to certain parts of a security policy by exploiting access to a computer with the administration console installed. Recommendations For SES Evolution versio...

PT-2021-19207

Name of the Vulnerable Software and Affected Versions SES Evolution versions prior to 2.1.0 Description The issue allows updating some parts of a security policy by leveraging access to a computer having the administration console installed. Recommendations For versions prior to 2.1.0, update to...

Stormshield SES Evolution 授权问题漏洞

Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from allowing some security policies to be updated on computers with access to a management console installed, and affects the followi...