CVE-2023-28130

🗓️ 26 Jul 2023 10:57:02Reported by checkpointType

cve🔗 web.nvd.nist.gov👁 140 Views🌐 WEB

Local user privilege escalation via Gaia Portal hostnames page

Reporter	Title	Published	Views	Family All 13
0day.today	Checkpoint Gaia Portal R81.10 Remote Command Execution Vulnerability	2 Aug 202300:00	–	zdt
Circl	CVE-2023-28130	26 Jul 202314:27	–	circl
CNNVD	Quantum Appliances 命令注入漏洞	26 Jul 202300:00	–	cnnvd
CheckPoint Security	Check Point Response to CVE-2023-28130 - Hostname command injection in Gaia Portal	25 Jul 202300:00	–	checkpoint_security
Cvelist	CVE-2023-28130	26 Jul 202310:57	–	cvelist
EUVD	EUVD-2023-31841	3 Oct 202520:07	–	euvd
NVD	CVE-2023-28130	26 Jul 202311:15	–	nvd
OSV	CVE-2023-28130	26 Jul 202311:15	–	osv
Packet Storm	Checkpoint Gaia Portal R81.10 Remote Command Execution	2 Aug 202300:00	–	packetstorm
Prion	Privilege escalation	26 Jul 202311:15	–	prion

NVD

Node

checkpoint gaia_portalMatchr80.40-

checkpoint gaia_portalMatchr81-

checkpoint gaia_portalMatchr81.10-

checkpoint gaia_portalMatchr81.20-

[
  {
    "product": "Quantum Appliances, Quantum Security Gateways",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "R81.20 before take 14, R81.10 before take 95, R81 before take 82 R80.40 before take 198"
      }
    ]
  }
]

Source	Link
support	www.support.checkpoint.com/results/sk/sk181311
seclists	www.seclists.org/fulldisclosure/2023/Aug/4
pentests	www.pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/
packetstormsecurity	www.packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html
seclists	www.seclists.org/fulldisclosure/2023/Jul/43

Parameter	Position	Path	Description	CWE
hostname	query param	/cgi-bin/hosts_dns.tcl	Authenticated user can inject commands via the hostname parameter in the CGI script leading to remote code execution.	CWE-94, CWE-20CWE-77

21 Nov 2024 07:54Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.2

EPSS0.04173

SSVC