PT-2019-4139 · Check Point · Check Point Zonealarm+1
Published
2019-04-22
·
Updated
2020-10-22
·
CVE-2019-8452
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Check Point ZoneAlarm versions up to 15.4.062
Check Point Endpoint Security client for Windows versions prior to E80.96
Description
The issue is related to errors in permission handling, allowing a local attacker to gain higher privileges to files with limited access by creating a hard-link from a log file archive. This can be exploited to change the permissions of any file on the system, making it accessible to all users.
Recommendations
For Check Point ZoneAlarm versions up to 15.4.062, update to a version later than 15.4.062 to resolve the issue.
For Check Point Endpoint Security client for Windows versions prior to E80.96, update to version E80.96 or later to fix the problem.
As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.
Exploit
Fix
Link Following
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Check Point Endpoint Security Client For Windows
Check Point Zonealarm