CVE-2020-0896 — Windows Hard Link in Check Point Endpoint Security Client FOR Windows

CWE-65 — Windows Hard LinkCWE-59 — Link FollowingCWE-269 — Improper Privilege Management21 documents5 sources
Severity
7.8HIGHNVD
NVD7.4
EPSS
0.4%
top 42.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
15
Checkpoint Endpoint SecurityCheckpoint Zonealarm Anti-ransomwareCheck Point Endpoint Security Client FOR Windows+12 more
Timeline
PublishedMar 12
Latest updateMay 24

Description

An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840, CVE-2020-0841, CVE-2020-0849.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages14 packages

▶CVEListV5microsoft/windows18 versions+17
▶NVDmicrosoft/windows4 versions+3
▶NVDmicrosoft/windows_106 versions+5
▶CVEListV5microsoft/windows_server17 versions+16

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

12
GHSA
GHSA-g47j-994j-jc39: ZoneAlarm Anti-Ransomware before version 1↗2022-05-24
▶
GHSA
GHSA-98hj-m7q4-8fq3: An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability↗2022-05-24
▶
GHSA
GHSA-wq9m-6prx-4m5m: An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability↗2022-05-24
▶
GHSA
GHSA-jr76-wvmm-8jfc: An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability↗2022-05-24
▶
GHSA
GHSA-mv3v-gjrf-8x3w: An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability↗2022-05-24
▶

📋Vendor Advisories

1
Microsoft
Windows Hard Link Elevation of Privilege Vulnerability↗2020-03-10
▶

🕵️Threat Intelligence

2
Talos
Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage↗2020-03-10
▶
Talos
Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage↗2020-03-10
▶
CVE-2020-0896 — Windows Hard Link in Check | cvebase