File Permission Vulnerability in Check Point ZoneAlarm Software
CVE-2019-8455

7.1HIGH

Key Information:

Vendor
Checkpoint
Status
Check Point Zonealarm
Vendor
CVE Published:
17 April 2019

Summary

An identified flaw in Check Point's ZoneAlarm software creates a hard link from the log file to any file on the system, inadvertently altering that file's permissions. This allows all users to access files that would typically have restricted access. Local attackers can exploit this vulnerability to gain elevated privileges, potentially compromising sensitive information.

Affected Version(s)

Check Point ZoneAlarm up to 15.4.062

References

https://www.zonealarm.com/software/release-history/zafavf...
x_refsource_MISC
http://www.securityfocus.com/bid/108029
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.