Lucene search

CheckpointCVE-2022-23745

HistoryJul 18, 2022 - 5:15 p.m.

CVE-2022-23745

2022-07-1817:15:08

CWE-787

CWE-1218

checkpoint

web.nvd.nist.gov

memory corruption

capsule workspace

android app

grapheneos

cve-2022-23745

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

38.4%

JSON

A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could result in application crashing but could not be used to gather any sensitive information.

Affected configurations

Nvd

Node

checkpointcapsule_workspaceRange8.0–8.2.2android

VendorProductVersionCPE
checkpointcapsule_workspace*cpe:2.3:a:checkpoint:capsule_workspace:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
checkpoint	capsule_workspace	*	cpe:2.3:a:checkpoint:capsule_workspace::::::android::*

CNA Affected

[
  {
    "product": "Checkpoint Harmony Capsule Workspace",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before 8.2.2"
      }
    ]
  }
]

References

supportcenter.us.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk179646

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

38.4%

JSON

Related for CVE-2022-23745