Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-41604

Published: 27/09/2022 Updated: 30/09/2022
CVSS v3 Base Score: 8.8 | Impact Score: 6 | Exploitability Score: 2
VMScore: 0
Subscribe to Zonealarm

Vulnerability Summary

Check Point ZoneAlarm Extreme Security prior to 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This can be leveraged to perform an arbitrary file move as NT AUTHORITY\SYSTEM.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

checkpoint zonealarm

References

CWE-269https://www.infigo.hr/en/insights/39/elevation-of-privilege-in-zonealarm-extreme-security/https://github.com/Wh04m1001/ZoneAlarmEoPhttps://www.zonealarm.com/software/extreme-security/release-historyhttps://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook