First published: Tue Jul 13 2021(Updated: )
SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Stormshield Endpoint Security | >=2.0.0<=2.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-31221 is a vulnerability in SES Evolution before version 2.1.0 that allows deleting some parts of a security policy by leveraging access to a computer with the administration console installed.
CVE-2021-31221 has a severity score of 5.7 (medium).
CVE-2021-31221 affects Stormshield Endpoint Security versions between 2.0.0 and 2.0.2 (inclusive).
To fix CVE-2021-31221, upgrade to SES Evolution version 2.1.0 or later.
You can find more information about CVE-2021-31221 in the advisory available at https://advisories.stormshield.eu/2021-023/.