CVE-2021-30359

State: Published
Severity: Not scored
Published: Oct 22, 2021
Updated: Aug 3, 2024
Reserved: Apr 7, 2021

Description

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation repair and place a specially crafted binary in the repair folder, which runs with the admin privileges.

Scores

The record has no CVSS score.

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
Check Point Harmony Browse and SandBlast Agent for Browsersn/a	before 90.08.7405Affected

References

https://supportcontent.checkpoint.com/solutions?id=sk175968
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0007/MNDT-2021-0007.md

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.