CVE-2022-23742

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links...

PT-2022-7274

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client for Windows versions earlier than E86.40 Description The issue is related to incorrect handling of symbolic links before accessing a file, which can allow an attacker to replace arbitrary files in the syste...

CVE-2022-23742: Windows Hard Link

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links...