Lucene search
+L

428 matches found

OSV
OSV
•added 2023/05/31 1:15 a.m.•11 views

CVE-2023-23562

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

4.3CVSS5.8AI score0.00407EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/05/31 1:15 a.m.•12 views

CVE-2023-23562

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

4.3CVSS5.9AI score0.00407EPSS
SaveExploits0References3
NVD
NVD
•added 2023/05/31 1:15 a.m.•33 views

CVE-2023-23562

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

4.3CVSS4.7AI score0.00407EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/05/31 12:00 a.m.•30 views

CVE-2023-23562

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

5AI score0.00407EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/31 12:00 a.m.•13 views

PT-2023-19042 · Stormshield · Stormshield Endpoint Security

Name of the Vulnerable Software and Affected Versions: Stormshield Endpoint Security versions 2.3.0 through 2.3.2 Description: The issue is related to Incorrect Access Control, allowing an authenticated user to update global parameters. Recommendations: For Stormshield Endpoint Security versions...

4.3CVSS6.8AI score0.00407EPSS
SaveExploits0References4
CVE
CVE
•added 2023/05/31 12:00 a.m.•74 views

CVE-2023-23562

CVE-2023-23562 affects Stormshield Endpoint Security versions 2.3.0 through 2.3.2. The underlying issue is an Incorrect Access Control that allows an authenticated user to update global parameters. Documents consistently describe the vulnerability without providing a confirmed remediation in the ...

4.3CVSS4.7AI score0.00407EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/05/31 12:00 a.m.•13 views

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield Endpoint Security versions 2.3.0 through 2.3.2 that stems from incorrect access control. An attacker could exploit the...

4.3CVSS5.2AI score0.00407EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/31 12:00 a.m.•5 views

CVE-2023-23562: Undefined Security Weakness

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

4.3CVSS5.7AI score0.00407EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/05/31 12:00 a.m.•15 views

CVE-2023-23562

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters...

4.7AI score0.00407EPSS
SaveExploits0References2
OSV
OSV
•added 2023/05/30 8:15 p.m.•14 views

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

5.5CVSS6.1AI score0.00147EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/05/30 8:15 p.m.•9 views

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

5.5CVSS5.9AI score0.00147EPSS
SaveExploits0References3
Prion
Prion
•added 2023/05/30 8:15 p.m.•25 views

Information disclosure

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

1.7CVSS5.4AI score0.00147EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/05/30 12:00 a.m.•35 views

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

5.7AI score0.00147EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/30 12:00 a.m.•15 views

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield Endpoint Security versions 2.3.0 through 2.3.2, which stems from incorrect access control that allows an authenticated us...

5.5CVSS5.7AI score0.00147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/30 12:00 a.m.•5 views

CVE-2023-23561: Origin Validation Error

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

5.5CVSS5.7AI score0.00147EPSS
SaveExploits0References2
CVE
CVE
•added 2023/05/30 12:00 a.m.•81 views

CVE-2023-23561

Summary: CVE-2023-23561 affects Stormshield Endpoint Security, versions 2.3.0–2.3.2, due to an incorrect access control that lets authenticated users read sensitive information. The issue is a local, low-complexity access control flaw (AV:L/AC:L/PR:L) with HIGH confidentiality impact and no integ...

5.5CVSS5.4AI score0.00147EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/05/30 12:00 a.m.•13 views

CVE-2023-23561

Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information...

6.7AI score0.00147EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/30 12:00 a.m.•17 views

PT-2023-19041 · Stormshield · Stormshield Endpoint Security

Name of the Vulnerable Software and Affected Versions: Stormshield Endpoint Security versions 2.3.0 through 2.3.2 Description: The issue allows authenticated users to read sensitive information due to incorrect access control. Recommendations: For versions 2.3.0 through 2.3.2, update to a version...

5.5CVSS6.6AI score0.00147EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2022/07/26 5:12 p.m.•16 views

security.stormshield.eu Cross Site Scripting vulnerability OBB-2816934

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•16 views

Stormshield Network Security 资源管理错误漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. A resource management error vulnerability exists in Stormshield Network Security. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the...

7.5CVSS7.3AI score0.00752EPSS
SaveExploits0References3
Rows per page
Query Builder