5 matches found
CVE-2021-31224
SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...
CVE-2021-31224
SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...
CVE-2021-31224
SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...
CVE-2021-31224
SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies...
CVE-2021-31224
The connected Red Hat advisory confirms CVE-2021-31224 affects SES Evolution prior to version 2.1.0. The vulnerability allows a user with read-only access to security policies to duplicate an existing policy, effectively bypassing intended policy immutability. The root cause is a permission/logic...