CVE-2023-28130

CVE-2023-28130 affects Check Point Gaia Portal. The root cause is improper handling of the hostname parameter in Gaia Portal’s hostnames page, enabling command injection and local privilege escalation. Public material indicates affected Gaia Portal/release lines (R81.x to R81.20, R80.40) with in-...

CVE-2021-30361

The vulnerability CVE-2021-30361 affects the Check Point Gaia Portal GUI Clients, where authenticated administrators with GUI Clients permissions can inject a command that executes on the Gaia OS. The issue stems from an insecure interaction in the GUI Clients feature, enabling local command inje...