CVE-2020-6020

🗓️ 24 Sep 2020 13:25:32Reported by checkpointType

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-6020	24 Sep 202013:25	–	cvelist
EUVD	EUVD-2020-27174	7 Oct 202500:30	–	euvd
NVD	CVE-2020-6020	24 Sep 202014:15	–	nvd
Prion	Input validation	24 Sep 202014:15	–	prion
Positive Technologies	PT-2020-18895 · Check Point · Check Point Security Management	24 Sep 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-6020	22 May 202517:30	–	redhatcve

NVD

Node

checkpoint ica_management_portalRange<r80.20

checkpoint ica_management_portalMatchr80.20-

checkpoint ica_management_portalMatchr80.20take_156

Node

checkpoint ica_management_portalRange<r80.30

checkpoint ica_management_portalMatchr80.30-

checkpoint ica_management_portalMatchr80.30take_200

Node

checkpoint ica_management_portalRange<r80.40

checkpoint ica_management_portalMatchr80.40-

Node

checkpoint ica_management_portalRange<r80.10

checkpoint ica_management_portalMatchr80.10-

[
  {
    "product": "ICA Management Portal",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before JHFs R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38"
      }
    ]
  }
]

Source	Link
supportcontent	www.supportcontent.checkpoint.com/solutions

21 Nov 2024 05:34Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.4

CVSS 27.4

EPSS0.00108

CWE-20