CVE-2021-31224: Low severity stormshield endpoint security vulnerability
Published Jul 13, 2021
·Updated
SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies.
Affected Software
1 affected component
Stormshield Endpoint Security>=2.0.0<=2.0.2
Event History
Jul 13, 2021
CVE Published
via MITRE·01:10 PM
Data Sourced
via MITRE·01:10 PM
Description
Frequently Asked Questions
1
What is CVE-2021-31224?
CVE-2021-31224 is a vulnerability in SES Evolution before version 2.1.0 that allows for duplicating an existing security policy by leveraging read-only access to security policies.
2
What is the severity of CVE-2021-31224?
CVE-2021-31224 has a severity rating of 3.5 (low).
3
How can the CVE-2021-31224 vulnerability be exploited?
The CVE-2021-31224 vulnerability can be exploited by a user with read-only access to security policies to duplicate an existing security policy.
4
Which software versions are affected by CVE-2021-31224?
SES Evolution versions between 2.0.0 and 2.0.2 are affected by CVE-2021-31224.
5
How can I fix CVE-2021-31224?
To fix CVE-2021-31224, users should upgrade to version 2.1.0 or later of SES Evolution.