by Kastro
Paper/Archive/CVE-2021-36794

CVE-2021-36794

mitre — In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled glob…

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 71.6.716 × 2014.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Investigate main process.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcommunity.siren.io/c/announcementsrefdocs.siren.io/indexrefdocs.siren.io/siren-platform-user-guide/11.1/release-notes.html#_security_fixes_3