CVE-2020-6020

2020-09-2413:25:32

CWE-20

checkpoint

www.cve.org

check point security management

internal ca

web management

vulnerability

command manipulation

input validation

trusted administrator

high privileged user

crash

weak input validation

EPSS

Percentile

12.6%

JSON

Check Point Security Management’s Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.

CNA Affected

[
  {
    "product": "ICA Management Portal",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before JHFs R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38"
      }
    ]
  }
]

References

supportcontent.checkpoint.com/solutions?id=sk142952

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2020-6020