Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-23742

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those f

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
checkpoint

Description

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Check Point Endpoint Security Client for Windows

  • before E86.40affected

References