CVE-2019-8459 - AskarLabs CVE Database

CVE-2019-8459

Vendor Check Point

Product Check Point Endpoint Security Client for Windows, VPN blade

Weakness CWE-428

Published June 20, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.

Key dates

02Disclosure timeline

June 20, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-8459 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/428.html

Related vulnerabilities

04Related CVE

CVE-2019-25292 Alps HID Monitor Service 8.1.0.10 - 'ApHidMonitorService' Unquote Service Path CVE-2021-47810 WibuKey Runtime 6.51 - 'WkSvW32.exe' Unquoted Service Path CVE-2017-20218 Serviio PRO 1.8 Local Privilege Escalation via Unquoted Path CVE-2020-15261 Unquoted service path vulnerability on Veyon CVE-2019-25271 NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path