CVEvulnerability

CVE-2022-23744

2.3 LOW Published 2022-07-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.3 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-470

Description

Check Point Endpoint before version E86.50 failed to protect against specific registry change which allowed to disable endpoint protection by a local administrator.

Affected configurations

• checkpoint endpoint security e83 • checkpoint endpoint security e84 • checkpoint endpoint security e85 • checkpoint endpoint security e86.10 • checkpoint endpoint security e86.20 • checkpoint endpoint security e86.30 • checkpoint endpoint security e86.40 • checkpoint harmony endpoint e83 • checkpoint harmony endpoint e84 • checkpoint harmony endpoint e85 • checkpoint harmony endpoint e86.10 • checkpoint harmony endpoint e86.20 • checkpoint harmony endpoint e86.30 • checkpoint harmony endpoint e86.40

Related

Weakness · CWE (1)

  • CWE-470 Use of Externally-Controlled Input to Select Classes or Code weakness

References