CVE-2022-23742: High severity Checkpoint Endpoint Security vulnerability
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability identifier for this issue?
The vulnerability identifier for this issue is CVE-2022-23742.
What is the affected software?
The affected software is Check Point Endpoint Security Client for Windows versions earlier than E86.40.
How can an attacker exploit this vulnerability?
An attacker can replace forensic report files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.
What is the severity of this vulnerability?
This vulnerability has a severity score of 7.8, which is considered high.
How can I fix this vulnerability?
To fix this vulnerability, update Check Point Endpoint Security Client to version E86.40 or later.