Vulnerability Details CVE-2021-36794
In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Investigate main process.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 6.8
References
- https://community.siren.io/c/announcements
- https://docs.siren.io/index
- https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html#_security_fixes_3
- https://community.siren.io/c/announcements
- https://docs.siren.io/index
- https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html#_security_fixes_3
Products affected by CVE-2021-36794
-
cpe:2.3:a:siren:investigate:-