PT-2021-21959
CVE-2021-38137
·
Published
2021-08-06
·
Updated
2022-07-12
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Corero SecureWatch Managed Services version 9.7.2.0020
Description:
The issue arises from incorrect privilege checking for
swa-monitor and cns-monitor users, allowing them to perform actions outside their designated roles.Recommendations:
For Corero SecureWatch Managed Services version 9.7.2.0020, consider restricting the privileges of
swa-monitor and cns-monitor users to their intended roles until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾