high7.8Public exploit code
CVE-2019-8452
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CheckPoint Endpoint Security Client/ZoneAlarm 15.4.062.17802 - Privilege Escalation2019-10-07 · local · windows
Impact
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkpoint | Endpoint Security | before e80.96 |
| Checkpoint | Zonealarm | through 15.4.062 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/154754/CheckPoint-Endpoint-Security-Client-ZoneAlarm-Privilege-Escalation.html
- https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012
- https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.260.17960
- http://packetstormsecurity.com/files/154754/CheckPoint-Endpoint-Security-Client-ZoneAlarm-Privilege-Escalation.html
- https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012
- https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.260.17960