CVE-2021-36794

EUVD-2021-23371
In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globally in the Siren Investigate main process.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
Affected Products (NVD)
VendorProductVersion
sireninvestigate
𝑥
< 11.1.4
𝑥
= Vulnerable software versions
References
https://community.siren.io/c/announcements
https://docs.siren.io/index
https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html#_security_fixes_3
https://community.siren.io/c/announcements
https://docs.siren.io/index
https://docs.siren.io/siren-platform-user-guide/11.1/release-notes.html#_security_fixes_3