CVE-2024-24912 — Incorrect Permission Assignment in Checkpoint Harmony Endpoint
Severity
6.7MEDIUMNVD
EPSS
0.1%
top 81.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 1
Description
A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9
Affected Packages2 packages
▶CVEListV5checkpoint/harmony_endpoint_security_client_for_windowsHarmony Endpoint Security Client for Windows versions E88.10 and below