What’s Vulnerable › Vulnerabilities

CVE-2023-35800

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-27 · updated 2026-06-17
• Weakness: CWE-732

Description

Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.

Affected products

• Stormshield Endpoint Security: from 2.0.0 through 2.4.2

References

• https://advisories.stormshield.eu
• https://advisories.stormshield.eu/2023-021/
• https://advisories.stormshield.eu
• https://advisories.stormshield.eu/2023-021/

Get alerted when CVE-2023-35800 or the next vulnerability affects your stack