PT-2019-4358 · Check Point · Check Point R80.30 Security Gateway
Publicado
2019-10-02
·
Atualizado
2019-10-09
·
CVE-2019-8462
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Check Point R80.30 Security Gateway versions prior to JHF Take 50
Description
The issue is related to a rare scenario where the Security Gateway crashes due to a unique configuration of enhanced logging. It is also associated with deficiencies in handling exceptional states when the Threat Prevention Forensics feature is enabled. This could potentially allow a remote attacker to cause a denial of service.
Recommendations
For Check Point R80.30 Security Gateway versions prior to JHF Take 50, apply JHF Take 50 to resolve the issue. As a temporary workaround, consider disabling the Threat Prevention Forensics feature until the patch is applied. Restrict access to the enhanced logging configuration to minimize the risk of exploitation.
Correção
Improper Handling of Exceptional Conditions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Check Point R80.30 Security Gateway