SES Evolution prior to 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies.
stormshield endpoint security