PT-2019-19053 · Check Point · Check Point Endpoint Security Client

Published 2019-06-20 · Updated 2019-10-09 · CVE-2019-8459

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions prior to E80.83

Description The issue arises when a process is started without using quotes in the path, potentially leading to the loading of a previously placed executable with a similar name to parts of the path, instead of the intended one.

Recommendations For versions prior to E80.83, update to version E80.83 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-8459

Affected Products

Check Point Endpoint Security Client

References · 3

• https://osv.dev/vulnerability/CVE-2019-8459 · Vendor Advisory
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk124972#Resolved%20Issues · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8459 · Security Note