CVE-2021-30359

Katalog CVE

CVSS 7.8 · High EPSS 3,9%

Kerentanan Uncontrolled Search Path Element pada checkpoint harmony browse, checkpoint sandblast agent for browsers. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation repair and place a specially crafted binary in the repair folder, which runs with the admin privileges.

Rincian

Terbit di NVD

22 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

3,9% peluang dieksploitasi; lebih tinggi dari 90,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://supportcontent.checkpoint.com/solutions?id=sk175968 advisory vendor
• https://github.com/mandiant/Vulnerability-Disclosures/blob/master/MNDT-2021-0007/MNDT-2021-0007.md advisory pihak ketiga