PT-2019-19053 · Check Point · Check Point Endpoint Security Client

Publicado 2019-06-20 · Atualizado 2019-10-09 · CVE-2019-8459

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions prior to E80.83

Description The issue arises when a process is started without using quotes in the path, potentially leading to the loading of a previously placed executable with a similar name to parts of the path, instead of the intended one.

Recommendations For versions prior to E80.83, update to version E80.83 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2019-8459

Produtos afetados

Check Point Endpoint Security Client

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-8459 · Aviso do Fabricante
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124972#Resolved%20Issues · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-8459 · Nota de Segurança