CVE-2023-35800: Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that...
0.0
CVSS
Description
Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.
Classification
CVE ID: CVE-2023-35800
CVSS Base Severity: LOW
CVSS Base Score: 0.0
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.07% (probability of being exploited)
EPSS Percentile: 33.1% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://advisories.stormshield.euhttps://advisories.stormshield.eu/2023-021/