Description (CNA)
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Check Point Endpoint Security Client for Windows | affected before E86.40 |
CWE
CWE-65
References
- https://supportcontent.checkpoint.com/solutions?id=sk178665%2C
- https://supportcontent.checkpoint.com/solutions?id=sk179132
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.