7.5
CVSSv2

CVE-2019-8459

Published: 20/06/2019 Updated: 09/10/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

checkpoint jumbo hotfix for endpoint security server

checkpoint endpoint security server package

checkpoint smartconsole for endpoint security server

checkpoint smartconsole for endpoint security server e80.83

checkpoint endpoint security clients

checkpoint remote access clients

checkpoint capsule docs standalone client