PT-2019-4358
CVE-2019-8462
·
Publicado
2019-10-02
·
Atualizado
2019-10-09
Descrição por
CVSS 2.0
7.8
AltaMétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Check Point R80.30 Security Gateway versions prior to JHF Take 50
Description
The issue is related to a rare scenario where the Security Gateway crashes due to a unique configuration of enhanced logging. It is also associated with deficiencies in handling exceptional states when the Threat Prevention Forensics feature is enabled. This could potentially allow a remote attacker to cause a denial of service.
Recommendations
For Check Point R80.30 Security Gateway versions prior to JHF Take 50, apply JHF Take 50 to resolve the issue. As a temporary workaround, consider disabling the Threat Prevention Forensics feature until the patch is applied. Restrict access to the enhanced logging configuration to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾