CVE-2020-6015 — Link Following in Checkpoint Endpoint Security

CWE-59 — Link Following3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 82.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Checkpoint Endpoint Security
Timeline
PublishedNov 5
Latest updateMay 24

Description

Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in non-standard locations.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-q8v4-p3qx-778f: Check Point Endpoint Security for Windows before E84↗2022-05-24
▶
CVEList
CVE-2020-6015: Check Point Endpoint Security for Windows before E84↗2020-11-05
▶
CVE-2020-6015 — Link Following in Checkpoint | cvebase