CVE-2021-31220

Medium

5.2/10

Summary

SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies.

Attack Complexity: LOW
Attack Vector: ADJACENT_NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: LOW
Confidentiality Impact: NONE
Availability Impact: NONE

References

Advisory Timeline

Published Jul 13, 2021