CVE-2019-8452
- State
- Published
- Severity
- Not scored
- Published
- Apr 22, 2019
- Updated
- Aug 4, 2024
- Reserved
- Feb 18, 2019
Description
A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Check Point ZoneAlarmCheck Point ZoneAlarm |
|
Check Point Endpoint Security client for WindowsCheck Point ZoneAlarm |
|
References
- https://www.zonealarm.com/software/release-history/zafavfw.html#15.4.260.17960
- https://supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk150012
- http://packetstormsecurity.com/files/154754/CheckPoint-Endpoint-Security-Client-ZoneAlarm-Privilege-Escalation.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.