CVE-2019-8459

2019-06-2016:50:58

CWE-428

checkpoint

www.cve.org

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.8%

JSON

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.

CNA Affected

[
  {
    "product": "Check Point Endpoint Security Client for Windows, VPN blade",
    "vendor": "Check Point",
    "versions": [
      {
        "status": "affected",
        "version": "before E80.83"
      }
    ]
  }
]