PT-2019-4145 · Check Point · Check Point Endpoint Security Initial Client
Publicado
2019-08-26
·
Atualizado
2019-10-09
·
CVE-2019-8461
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Check Point Endpoint Security Initial Client for Windows versions prior to E81.30
Description
The issue is related to an unbounded file upload vulnerability. It may allow a remote attacker to elevate their privileges. An attacker can leverage this to gain local privilege escalation (LPE) using a specially crafted DLL placed in any PATH location accessible with write permissions to the user.
Recommendations
For versions prior to E81.30, update to version E81.30 or later to resolve the issue. As a temporary workaround, consider restricting write access to PATH locations to minimize the risk of exploitation.
Exploit
Correção
Untrusted Search Path
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Check Point Endpoint Security Initial Client