2023-03-10 22:00:37 +00:00
|
|
|
{
|
2023-07-26 11:00:34 +00:00
|
|
|
"data_version": "4.0",
|
2023-03-10 22:00:37 +00:00
|
|
|
"data_type": "CVE",
|
|
|
|
|
"data_format": "MITRE",
|
|
|
|
|
"CVE_data_meta": {
|
|
|
|
|
"ID": "CVE-2023-28130",
|
2023-07-26 11:00:34 +00:00
|
|
|
"ASSIGNER": "cve@checkpoint.com",
|
|
|
|
|
"STATE": "PUBLIC"
|
2023-03-10 22:00:37 +00:00
|
|
|
},
|
|
|
|
|
"description": {
|
|
|
|
|
"description_data": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
2023-07-26 11:00:34 +00:00
|
|
|
"value": "Local user may lead to privilege escalation using Gaia Portal hostnames page."
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"problemtype": {
|
|
|
|
|
"problemtype_data": [
|
|
|
|
|
{
|
|
|
|
|
"description": [
|
|
|
|
|
{
|
|
|
|
|
"lang": "eng",
|
|
|
|
|
"value": "CWE-20: Improper Input Validation",
|
|
|
|
|
"cweId": "CWE-20"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"affects": {
|
|
|
|
|
"vendor": {
|
|
|
|
|
"vendor_data": [
|
|
|
|
|
{
|
|
|
|
|
"vendor_name": "n/a",
|
|
|
|
|
"product": {
|
|
|
|
|
"product_data": [
|
|
|
|
|
{
|
|
|
|
|
"product_name": "Quantum Appliances, Quantum Security Gateways",
|
|
|
|
|
"version": {
|
|
|
|
|
"version_data": [
|
|
|
|
|
{
|
|
|
|
|
"version_affected": "=",
|
|
|
|
|
"version_value": "R81.20 before take 14, R81.10 before take 95, R81 before take 82 R80.40 before take 198"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"references": {
|
|
|
|
|
"reference_data": [
|
2023-07-30 16:00:33 +00:00
|
|
|
{
|
|
|
|
|
"url": "https://support.checkpoint.com/results/sk/sk181311",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "https://support.checkpoint.com/results/sk/sk181311"
|
|
|
|
|
},
|
2023-07-26 11:00:34 +00:00
|
|
|
{
|
2023-07-30 14:00:32 +00:00
|
|
|
"url": "https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/",
|
2023-07-26 11:00:34 +00:00
|
|
|
"refsource": "MISC",
|
2023-07-30 14:00:32 +00:00
|
|
|
"name": "https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/"
|
2023-08-01 21:00:34 +00:00
|
|
|
},
|
2023-08-02 12:00:36 +00:00
|
|
|
{
|
|
|
|
|
"url": "http://seclists.org/fulldisclosure/2023/Jul/43",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "http://seclists.org/fulldisclosure/2023/Jul/43"
|
|
|
|
|
},
|
2023-08-01 21:00:34 +00:00
|
|
|
{
|
|
|
|
|
"url": "http://seclists.org/fulldisclosure/2023/Aug/4",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "http://seclists.org/fulldisclosure/2023/Aug/4"
|
2023-08-02 18:00:38 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"url": "http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html",
|
|
|
|
|
"refsource": "MISC",
|
|
|
|
|
"name": "http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html"
|
2023-03-10 22:00:37 +00:00
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
}
|
