Description
Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent contain a path traversal vulnerability that allows an unauthenticated attacker to upload and execute arbitrary scripts.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Quantum Security Management | checkpoint / Quantum Security Management | R80.10 (EOS) | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R80.20 (EOS) | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R80.30 (EOS) | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R80.40 (EOS) | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R80 (EOS) | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R81.10 (EOS) with Jumbo Hotfix Take 190 or below | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R81.20 with Jumbo Hotfix Take 166 or below | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R81 (EOS) | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R82.10 with Jumbo Hotfix Take 44 or below | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R82.20 with no Jumbo Hotfix | affected |
| Quantum Security Management | checkpoint / Quantum Security Management | R82 with Jumbo Hotfix Take 126 or below | affected |