CVE-2021-38137

Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role.

Date published : 2021-08-06

https://www.corero.com/blog/data-sheets-corero-securewatch-managed-services/

https://www.shielder.it/advisories/corero_secure_watch_managed_services-multiple-broken-access-control/