PT-2014-2011 · Check Point · Check Point Security Gateway

Publicado 2014-01-29 · Atualizado 2014-04-01 · CVE-2013-7350

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Check Point Security Gateway 80 versions R71.x through R71.44 Check Point Security Gateway 600 and 1100 appliances versions R75.20.x through R75.20.41 Check Point Security Gateway versions R75.20.x through R75.20.3

Description The issue is related to multiple unspecified vulnerabilities in Check Point Security Gateway, which may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. These vulnerabilities are associated with insufficient access restrictions to certain functions.

Recommendations For Check Point Security Gateway 80 versions R71.x through R71.44, update to version R71.45 or later. For Check Point Security Gateway 600 and 1100 appliances versions R75.20.x through R75.20.41, update to version R75.20.42 or later. For Check Point Security Gateway versions R75.20.x through R75.20.3, update to version R75.20.4 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2019-03758

CVE-2013-7350

Produtos afetados

Check Point Security Gateway

Referências · 6

• http://osvdb.org/102745 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-7350 · Nota de Segurança
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98332&src=securityAlerts · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7350 · Nota
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98332&src=securityAlerts · Nota
• https://bdu.fstec.ru/vul/2019-03758 · Nota de Segurança