CVEvulnerability

CVE-2020-6020

6.4 MEDIUM Published 2020-09-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
CVSS 2.0 ([email protected])
7.4 HIGH — AV:A/AC:L/Au:S/C:C/I:C/A:P
Weaknesses
CWE-20

Description

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.

Affected configurations

• checkpoint ica management portal (< r80.20) • checkpoint ica management portal r80.20 • checkpoint ica management portal (< r80.30) • checkpoint ica management portal r80.30 • checkpoint ica management portal (< r80.40) • checkpoint ica management portal r80.40 • checkpoint ica management portal (< r80.10) • checkpoint ica management portal r80.10

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References