CVE-2020-6020

Опубликовано: 24 сент. 2020

Источник: nvd

CVSS3: 6.4

CVSS2: 7.4

EPSS Низкий

Описание

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.

Ссылки

https://supportcontent.checkpoint.com/solutions?id=sk142952
Vendor Advisory
https://supportcontent.checkpoint.com/solutions?id=sk142952
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:checkpoint:ica_management_portal:*:*:*:*:*:*:*:*

Версия до r80.20 (исключая)

cpe:2.3:a:checkpoint:ica_management_portal:r80.20:-:*:*:*:*:*:*

cpe:2.3:a:checkpoint:ica_management_portal:r80.20:take_156:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:checkpoint:ica_management_portal:*:*:*:*:*:*:*:*

Версия до r80.30 (исключая)

cpe:2.3:a:checkpoint:ica_management_portal:r80.30:-:*:*:*:*:*:*

cpe:2.3:a:checkpoint:ica_management_portal:r80.30:take_200:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:checkpoint:ica_management_portal:*:*:*:*:*:*:*:*

Версия до r80.40 (исключая)

cpe:2.3:a:checkpoint:ica_management_portal:r80.40:-:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:checkpoint:ica_management_portal:*:*:*:*:*:*:*:*

Версия до r80.10 (исключая)

cpe:2.3:a:checkpoint:ica_management_portal:r80.10:-:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00108

Низкий

6.4 Medium

CVSS3

7.4 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-j4c7-wg39-qp3p

CVSS3: 6.4

github

больше 3 лет назад

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.

EPSS

Процентиль: 29%

0.00108

Низкий

6.4 Medium

CVSS3

7.4 High

CVSS2

Дефекты

CWE-20