CVE-2019-8452: Windows Hard Link

A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gain...

PT-2019-4139

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm versions up to 15.4.062 Check Point Endpoint Security client for Windows versions prior to E80.96 Description The issue is related to errors in permission handling, allowing a local attacker to gain higher privileges to...

CVE-2019-8453

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client...

CVE-2019-8455

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

Hardcoded credentials

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

Denial of service

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client...

CVE-2019-8453

CVE-2019-8453 concerns Check Point ZoneAlarm releases up to 15.4.062 where DLLs are loaded from directories writable by all users. The root cause is DLL search/load from world-writable paths, enabling a local attacker to replace a DLL with a malicious one and cause a Denial of Service to the clie...

CVE-2019-8453

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client...

CVE-2019-8455

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

CVE-2019-8455

The CVE-2019-8455 entry concerns Check Point ZoneAlarm (up to version 15.4.062). A hard-link created from the log file to any system file can cause the linked file’s permissions to be changed to grant access to all users, enabling a local attacker to gain higher privileges on targeted files. Conn...

CVE-2019-8453: Process Control

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL file with a malicious one and cause Denial of Service to the client...

CVE-2019-8455: Windows Hard Link

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

PT-2019-19050

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm versions up to 15.4.062 Description The issue allows a local attacker to potentially cause Denial of Service to the client by replacing a DLL file with a malicious one, due to the DLLs being loaded from directories where...

PT-2019-19051

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm versions up to 15.4.062 Description A local attacker can gain higher privileges to files with limited access by creating a hard-link from the log file of Check Point ZoneAlarm to any file on the system, resulting in...

PT-2019-2544

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security client for Windows versions prior to E80.96 Description The issue is related to insufficient access control in the Check Point Endpoint Security client, which can be exploited by a local attacker. This can be done...

CVE-2019-8456

Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server...

CVE-2019-8456

Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server...

Design/Logic Flaw

Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server...

CVE-2019-8456

Check Point IKEv2 IPsec VPN up to R80.30, in some less common conditions, may allow an attacker with knowledge of the internal configuration and setup to successfully connect to a site-to-site VPN server...

CVE-2019-8456

Summary of CVE-2019-8456 (Check Point): A vulnerability in Check Point’s IKEv2 IPsec VPN up to R80.30 could allow an attacker with knowledge of internal configuration to connect to a site-to-site VPN server via the IKEv2 tunnel. The issue is specific to IKEv2 on Security Gateways (R77.x not affec...