CVE-2022-23742

Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@checkpoint.com

Published

2022-05-12

Last modified

2026-06-02

Weaknesses

CWE-59, CWE-65

Affected products

• Endpoint Security (Checkpoint)

References

• https://supportcontent.checkpoint.com/solutions?id=sk178665%2C
• https://supportcontent.checkpoint.com/solutions?id=sk179132