CVE-2019-8459 — Unquoted Search Path or Element in Checkpoint Capsule Docs Standalone Client

CWE-428 — Unquoted Search Path or Element3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.5%
top 33.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Checkpoint Capsule Docs Standalone ClientCheckpoint Endpoint Security ClientsCheckpoint Endpoint Security Server Package+3 more
Timeline
PublishedJun 20
Latest updateMay 24

Description

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages6 packages

🔴Vulnerability Details

2
GHSA
GHSA-vp84-gqh8-x8v5: Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80↗2022-05-24
▶
CVEList
CVE-2019-8459: Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80↗2019-06-20
▶
CVE-2019-8459 — Unquoted Search Path or Element | cvebase