CVE-2020-6020
Medium
Description
Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.
SeverityMedium
CVSS6.4
Exploit probability—
ProductCheckpoint Ica Management Portal
PublishedSep 24, 2020
First seenSep 24, 2020
Weakness typeCWE-20Improper input validation
How to fix
Update
- checkpoint ica_management_portalr80.20, r80.30, r80.40, r80.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checkpoint ica_management_portal | v < r80.20, r80.20, v < r80.30, r80.30, v < r80.40, r80.40, v < r80.10, r80.10 | r80.20, r80.30, r80.40, r80.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.