CVE-2021-45091 — Incorrect Authorization in Endpoint Security

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 54.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Stormshield Endpoint Security
Timeline
PublishedDec 21
Latest updateDec 22

Description

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages1 packages

▶NVDstormshield/endpoint_security2.1.0, 2.1.1+1

🔴Vulnerability Details

2
GHSA
GHSA-8p9m-jxfc-72v5: Stormshield Endpoint Security from 2↗2021-12-22
▶
CVEList
CVE-2021-45091: Stormshield Endpoint Security from 2↗2021-12-21
▶
CVE-2021-45091 — Incorrect Authorization | cvebase