CVE-2021-38137 | BDVDB-2026-158270 Detail

Description#

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.corero.com/blog/data-sheets-corero-securewatch-managed-services/
https://www.shielder.it/advisories/corero_secure_watch_managed_services-multiple-broken-access-control/

Exploit#

No public exploit known

History#

Version 12021-08-06Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.