CVE-2021-30359

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation...

CVE-2021-30359

The CVE-2021-30359 issue affects Check Point Harmony Browse and the SandBlast Agent for Browsers installers. The root cause is that the Windows MS Installer allows regular users to repair an installation, enabling an attacker who runs an older installer to place a crafted binary in the repair fol...

Check Point Response to CVE-2021-30359 - Harmony Browse installer or SandBlast Agent for Browsers installer can be used for privileges escalation

Cause The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer let regular users to repair their installation, an attacker running the old version of the installer can start the installati...