CVE-2023-23562

概要

参考情報

• advisories.stormshield.eu · Vendor Advisory
• advisories.stormshield.eu/2023-002 · Vendor Advisory

endpoint security のその他の脆弱性

• CVE-2023-35800中 4.3Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that…
• CVE-2023-35799中 5.5Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to…
• CVE-2023-23561中 5.5Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information.
• CVE-2022-4304中 5.9A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a ne…
• CVE-2021-45091中 4.3Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.