CVE Vulnerability

CVE-2020-6020

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.

7.4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 5.1 / Impact : 9.5

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact PARTIAL

Scope

6.4 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.5

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://supportcontent.checkpoint.com/solutions?id=sk142952 Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:checkpoint:ica_management_portal:r80.20:-:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:r80.20:take_156:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:*:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:r80.30:take_200:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:r80.30:-:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:*:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:r80.40:-:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:*:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:*:*:*:*:*:*:*:*
cpe:2.3:a:checkpoint:ica_management_portal:r80.10:-:*:*:*:*:*:*
Information

Published : 2020-09-24 02:15

Updated : 2022-11-16 01:56

NVD link : CVE-2020-6020

Mitre link : CVE-2020-6020

Products Affected
No products.
CWE
CWE-20