Beveiligingsadvies

CVE-2022-41604

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-09-27 02:17:14

Laatst bijgewerkt 2025-05-22 13:52:43

Toegewezen door mitre

CVSS-score 8.8

Status PUBLISHED

Beschrijving

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This can be leveraged to perform an arbitrary file move as NT AUTHORITY\SYSTEM.

← Alle CVE's bekijken Bekijk op cve.org ↗