CVE Catalog
CVE-2023-35799
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
Stormshield Endpoint Security Evolution versions 2.0.0 through 2.3.2 have insecure permissions. An interactive user can use the SES Evolution agent to create arbitrary files with local system privileges.
Risk Assessment
The risk associated with this vulnerability is the potential for unauthorized access to the system, which could lead to serious security breaches.
Recommendation
It is recommended to update to the latest version of the software to eliminate insecure permissions and restrict access to the SES Evolution agent.
Original NVD description (English source)
Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary files with local system privileges.