Check Point Local Privilege Escalation

The remote host is running a version of Checkpoint Endpoint Security Initial Client. that is vulnerable to a local privilege escalation vulnerability. The vulnerability exists because vulnerable versions attempt to load a DLL that is placed in any PATH location on a clean install. An attacker cou...

Check Point Response to CVE-2019-8461 - Endpoint Security Initial Client

...

CVE-2019-8461: Process Control

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can leverage this to gain LPE using a specially crafted DLL placed in any PATH location accessible with...

PT-2019-4145

Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Initial Client for Windows versions prior to E81.30 Description The issue is related to an unbounded file upload vulnerability. It may allow a remote attacker to elevate their privileges. An attacker can leverage...

PT-2019-4180

Name of the Vulnerable Software and Affected Versions Swift versions prior to 5.1.1 Endpoint Security Initial Client for Windows affected versions not specified Description The issue concerns incorrect management of file descriptors in URLSession, potentially leading to inadvertent data disclosur...