Check Point Patches Privilege Escalation Flaw in Endpoint Client

guest · Aug 27, 2019

Check Point Patches Privilege Escalation Flaw in Endpoint Client
August 27, 2019
https://www.bleepingcomputer.com/ne...privilege-escalation-flaw-in-endpoint-client/

Check Point Software patched a vulnerability discovered in its Endpoint Security Initial Client software for Windows allowing potential attackers to escalate privileges and execute code using SYSTEM privileges.

The privilege escalation security flaw tracked as CVE-2019-8790 makes it possible for attackers to run malicious payloads using system-level privileges as well as evade anti-malware detection by bypassing application whitelisting, a technique commonly used to prevent the execution of either unknown or potentially malicious apps.
Loading arbitrary unsigned DLLs
The vulnerability is induced by the lack of safe DLL loading caused by the use of an uncontrolled search path and by not validating if the DLLs it loads is signed with a digital certificate as Hadar details.
Click to expand...

Log in or Sign up

Check Point Patches Privilege Escalation Flaw in Endpoint Client

guest Guest

Log in or Sign up

Check Point Patches Privilege Escalation Flaw in Endpoint Client

guest Guest

Useful Searches