PT-2023-3999 · Check Point · Check Point Endpoint Security Client

CVE-2023-28133

·

Publicado

2023-07-19

·

Atualizado

2023-08-01

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Check Point Endpoint Security Client version E87.30
Description The issue is related to a local privilege escalation in Check Point Endpoint Security Client. It is caused by incorrect permission assignment for a critical resource. Exploitation of this issue may allow an attacker to elevate their privileges.
Recommendations For version E87.30, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to critical resources to minimize the risk of exploitation.

Correção

Incorrect Permission

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-04297
CVE-2023-28133

Produtos afetados

Check Point Endpoint Security Client