ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a combination of file permission manipulation and exploitation of Windows CVE-2020-00896 on unpatched systems.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCheckpoint Zonealarm Extreme Security
APPCheckpoint< 15.8.109.18436
Related vulnerabilities
Race condition in ZoneAlarm Extreme Security 9.1.507.000 on Windows XP allows local users to bypass kernel-mod...
Authentication bypass w Check Point SmartConsole — pełny dostęp administratora
Auth Bypass w Check Point VPN — pominięcie uwierzytelnienia przez błąd IKEv1
Check Point Endpoint Security Client – privilege escalation przez niecytowaną ścieżkę (Unquoted Service Path)
Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected t...