CVE-2023-28130

Опубликовано: 26 июл. 2023

Источник: nvd

CVSS3: 7.2

EPSS Низкий

Описание

Local user may lead to privilege escalation using Gaia Portal hostnames page.

Ссылки

http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Aug/4
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Jul/43
Not Applicable
https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/
Exploit
Third Party Advisory
https://support.checkpoint.com/results/sk/sk181311
Vendor Advisory
http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Aug/4
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2023/Jul/43
Not Applicable
https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/
Exploit
Third Party Advisory
https://support.checkpoint.com/results/sk/sk181311
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:checkpoint:gaia_portal:r80.40:-:*:*:*:*:*:*

cpe:2.3:a:checkpoint:gaia_portal:r81:-:*:*:*:*:*:*

cpe:2.3:a:checkpoint:gaia_portal:r81.10:-:*:*:*:*:*:*

cpe:2.3:a:checkpoint:gaia_portal:r81.20:-:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03487

Низкий

7.2 High

CVSS3

Дефекты

CWE-20

CWE-77

Связанные уязвимости

GHSA-22j3-6r5q-rjwj

CVSS3: 7.2

github

почти 2 года назад

Local user may lead to privilege escalation using Gaia Portal hostnames page.

BDU:2023-04502

CVSS3: 8.4

fstec

больше 2 лет назад

Уязвимость компонента cgi-bin/hosts_dns.tcl веб-интерфейса настройки Gaia Portal операционной системы Gaia сетевых устройств Quantum Security Gateways и Quantum Appliances, позволяющая нарушителю выполнить произвольные команды