Description
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
checkpoint Quantum Security Management
R82.10 with Jumbo Hotfix Take 6 or belowaffectedR82 with Jumbo Hotfix Take 91 or belowaffectedR81.20 with Jumbo Hotfix Take 127 or belowaffectedAll releases from R81.10 and belowaffected