CVE-2023-28134: checkpoint endpoint_security

Vulnerability summary

CVE-2023-28134 is a high (CVSS 7.8) vulnerability in checkpoint endpoint_security. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 13.9% of scored vulnerabilities.

Timeline

1. 12-11-2023
   PublishedVulnerability first disclosed.
2. 03-09-2024
   Last modifiedVulnerability information updated.

Description

Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

• CWE-732Incorrect Permission Assignment for Critical ResourceThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.