Lucene search

CheckpointCVE-2021-30359

HistoryOct 22, 2021 - 2:15 p.m.

CVE-2021-30359

2021-10-2214:15:08

CWE-427

checkpoint

web.nvd.nist.gov

cve-2021-30359

harmony browse

sandblast agent

installer

privilege escalation

vulnerability

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

12.6%

JSON

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation repair and place a specially crafted binary in the repair folder, which runs with the admin privileges.

Affected configurations

Nvd

Node

microsoftwindowsMatch-

AND

checkpointharmony_browseRange<90.08.7405

checkpointsandblast_agent_for_browsersRange<90.08.7405

VendorProductVersionCPE
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
checkpointharmony_browse*cpe:2.3:a:checkpoint:harmony_browse:*:*:*:*:*:*:*:*
checkpointsandblast_agent_for_browsers*cpe:2.3:a:checkpoint:sandblast_agent_for_browsers:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*
checkpoint	harmony_browse	*	cpe:2.3:a:checkpoint:harmony_browse::::::::
checkpoint	sandblast_agent_for_browsers	*	cpe:2.3:a:checkpoint:sandblast_agent_for_browsers::::::::

CNA Affected

[
  {
    "product": "Check Point Harmony Browse and SandBlast Agent for Browsers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before 90.08.7405"
      }
    ]
  }
]

References

github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0007/MNDT-2021-0007.md

supportcontent.checkpoint.com/solutions?id=sk175968

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-30359