Vulnerability Details : CVE-2021-36794
In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Investigate main process.
Exploit prediction scoring system (EPSS) score for CVE-2021-36794
Probability of exploitation activity in the next 30 days: 0.24%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 61 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2021-36794
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
[email protected] |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
[email protected] |
References for CVE-2021-36794
-
https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html#_security_fixes_3
Release Notes;Vendor Advisory
-
https://docs.siren.io/index
Release Notes;Vendor Advisory
-
https://community.siren.io/c/announcements
Vendor Advisory
Products affected by CVE-2021-36794
- cpe:2.3:a:siren:investigate:*:*:*:*:*:*:*:*