Input validation

2020-09-2414:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Check Point Security Management’s Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.

CPENameOperatorVersion
ica_management_portaleq80.20.114
ica_management_portaleqr80.20 take-156
ica_management_portaleq< r80.20
ica_management_portaleqr80.30 take-200
ica_management_portaleq80.30.114
ica_management_portaleq< r80.30
ica_management_portaleq80.40.114
ica_management_portaleq< r80.40
ica_management_portaleq< r80.10
ica_management_portaleq80.10.114

Name	Operator	Version
ica_management_portal	eq	80.20.114
ica_management_portal	eq	r80.20 take-156
ica_management_portal	eq	< r80.20
ica_management_portal	eq	r80.30 take-200
ica_management_portal	eq	80.30.114
ica_management_portal	eq	< r80.30
ica_management_portal	eq	80.40.114
ica_management_portal	eq	< r80.40
ica_management_portal	eq	< r80.10
ica_management_portal	eq	80.10.114

References

supportcontent.checkpoint.com/solutions?id=sk142952