CVE-2023-23562

CVE-2023-23562 affects Stormshield Endpoint Security versions 2.3.0 through 2.3.2. The underlying issue is an Incorrect Access Control that allows an authenticated user to update global parameters. Documents consistently describe the vulnerability without providing a confirmed remediation in the ...

CVE-2023-23562

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

CVE-2023-23562

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

Information disclosure

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield Endpoint Security versions 2.3.0 through 2.3.2, which stems from incorrect access control that allows an authenticated us...

PT-2023-19041 · Stormshield · Stormshield Endpoint Security

Name of the Vulnerable Software and Affected Versions: Stormshield Endpoint Security versions 2.3.0 through 2.3.2 Description: The issue allows authenticated users to read sensitive information due to incorrect access control. Recommendations: For versions 2.3.0 through 2.3.2, update to a version...

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

CVE-2023-23561

Summary: CVE-2023-23561 affects Stormshield Endpoint Security, versions 2.3.0–2.3.2, due to an incorrect access control that lets authenticated users read sensitive information. The issue is a local, low-complexity access control flaw (AV:L/AC:L/PR:L) with HIGH confidentiality impact and no integ...

Code injection

OX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from a drive, reading contact data, and renaming tokens...

CVE-2023-24605

OX App Suite (Open-Xchange) before backend 7.10.6-rev37 does not enforce two-factor authentication on all endpoints, enabling potential unauthorized access to sensitive data via endpoints such as reading from a drive, reading contact data, and token renaming. The issue is described across multipl...

Webinar with Guest Forrester: Browser Security New Approaches

In today's digital landscape, browser security has become an increasingly pressing issue, making it essential for organizations to be aware of the latest threats to browser security. That's why the Browser Security platform LayerX is hosting a webinar featuring guest speaker Paddy Harrington, a...

Employee guilty of joining ransomware attack on his own company

A 28-year old IT Security Analyst pleaded guilty and will consequently be convicted of blackmail and unauthorized access to a computer with intent to commit other offences. It all started when the UK gene and cell therapy company Oxford BioMedica fell victim to a cybersecurity incident which...

CVE-2023-31497

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...

CVE-2023-31497

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...

Improper access control

Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security EPS all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system...

PT-2023-23363 · Seqrite · Seqrite Endpoint Security

Name of the Vulnerable Software and Affected Versions: Seqrite Endpoint Security EPS versions prior to 8.0 Description: The issue is related to incorrect access control, allowing attackers to escalate privileges to root by supplying a crafted binary to the target system. Recommendations: For...