CVE-2021-30360: checkpoint endpoint_security Uncontrolled Search Path Element

Vulnerability summary

CVE-2021-30360 is a high (CVSS 7.8) Uncontrolled Search Path Element vulnerability in checkpoint endpoint_security. EPSS estimates a 0.57% chance of exploitation in the next 30 days, higher than 46% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 07-01-2022
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client privileges.

• CWE-427Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.