CVEvulnerability

CVE-2020-6024

7.8 HIGH Published 2021-01-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-114, CWE-269

Description

Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users.

Affected configurations

• checkpoint smartconsole (<= r80.10) • checkpoint smartconsole r80.20 • checkpoint smartconsole r80.30 • checkpoint smartconsole r80.40 • checkpoint smartconsole r81

Related

Weakness · CWE (2)

  • CWE-114 Process Control weakness
  • CWE-269 Improper Privilege Management weakness

References