CVE-2019-8454
- State
- Published
- Severity
- Not scored
- Published
- Apr 29, 2019
- Updated
- Aug 4, 2024
- Reserved
- Feb 18, 2019
Description
A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonating the WPAD server, the attacker can write BAT commands into that file that will later be run by the user or the system.
Scores
The record has no CVSS score.
Weaknesses
- CWE-65 ,CWE-377
Affected Products
| Product | Versions |
|---|---|
Check Point Endpoint Security client for WindowsCheck Point |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.