Vulnerability · Published Aug 4, 2020 · Assigned by checkpoint
CVE-2020-6012
High 7.4
In plain English
A high-severity security flaw in ZoneAlarm Anti-Ransomware. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).
Severity (CVSS NVD)7.4High
Exploit odds (30 days)0.5%top 54.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an unprivileged user to enable escalation of privilege via local access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ZoneAlarm Anti-Ransomware | before 1.0.713 |
Weakness: CWE-59
References
- https://www.zonealarm.com/software/extreme-security/release-history x_refsource_MISC
- https://www.zonealarm.com/anti-ransomware/release-history x_refsource_MISC
- https://danishcyberdefence.dk/blog/zonealarm-check-point x_refsource_MISC