The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). This allows an unprivileged user to enable escalation of privilege via local access. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. In addition, weak permissions in the ProgramData\CheckPoint\ZoneAlarm\Data\Updates directory allow a local attacker the ability to execute an arbitrary file write, leading to execution of code as local system, in ZoneAlarm versions before v15.8.211.192119
Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process.
0 kommentar(er)
