MEDIUM🇵🇱 Wersja polska

CVE-2021-30361

CVSS 6.7v3.1pub. 2022-05-11upd. 2024-11-21

The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Checkpoint Gaia Os

    OS
    Checkpoint
    all versions

  • Checkpoint Gaia Portal

    APP
    Checkpoint
    < 2022-04-13

  • Checkpoint Quantum Security Gateway

    HW
    Checkpoint
    all versions

  • Checkpoint Quantum Security Management

    HW
    Checkpoint
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2026-16232CRITICAL9.3⚠ KEVPL ✓same product

Authentication bypass w Check Point SmartConsole — pełny dostęp administratora

CVE-2026-50751CRITICAL9.3⚠ KEVPL ✓same product

Auth Bypass w Check Point VPN — pominięcie uwierzytelnienia przez błąd IKEv1

CVE-2024-24919HIGH8.6⚠ KEVsame product

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected t...

CVE-2024-24914HIGH8.0same product

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Secu...

CVE-2023-28130HIGH7.2same product

Local user may lead to privilege escalation using Gaia Portal hostnames page.