Vulnerability · Published Sep 24, 2020 · Assigned by checkpoint
CVE-2020-6020
Medium 6.4
In plain English
A medium-severity improper input validation in ICA Management Portal. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS NVD)6.4Medium
Exploit odds (30 days)0.5%top 56.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ICA Management Portal | before JHFs R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38 |
Weakness: CWE-20
References
- https://supportcontent.checkpoint.com/solutions?id=sk142952 x_refsource_MISC