ID
VAR-202101-1673
CVE
CVE-2020-6024
TITLE
Check Point SmartConsole Vulnerability in privilege management
Trust: 0.8
sources:
JVNDB: JVNDB-2020-015676
DESCRIPTION
Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation due to running executables from a directory with write access to all authenticated users. Check Point SmartConsole Contains a privilege management vulnerability.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Check Point Smartconsole is a desktop application software used to manage the Check point environment by Check Point Corporation in the United States
Trust: 1.8
sources:
NVD: CVE-2020-6024 //
JVNDB: JVNDB-2020-015676 //
VULHUB: VHN-184149 //
VULMON: CVE-2020-6024
AFFECTED PRODUCTS
| vendor: | checkpoint | model: | smartconsole | scope: | eq | version: | r80.20 | Trust: 1.0 |
| vendor: | checkpoint | model: | smartconsole | scope: | eq | version: | r81 | Trust: 1.0 |
| vendor: | checkpoint | model: | smartconsole | scope: | eq | version: | r80.30 | Trust: 1.0 |
| vendor: | checkpoint | model: | smartconsole | scope: | eq | version: | r80.40 | Trust: 1.0 |
| vendor: | checkpoint | model: | smartconsole | scope: | lte | version: | r80.10 | Trust: 1.0 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | eq | version: | r80.10 build 185 | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | lt | version: | r81 | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | eq | version: | build 548 | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | eq | version: | r80.20 build 119 | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | eq | version: | build 94 | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | lt | version: | r80.30 | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | lt | version: | r80.40 | Trust: 0.8 |
| vendor: | チェック ポイント ソフトウェア テクノロジーズ | model: | smartconsole | scope: | eq | version: | build 415 | Trust: 0.8 |
sources:
JVNDB: JVNDB-2020-015676 //
NVD: CVE-2020-6024
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
sources:
VULHUB: VHN-184149 //
VULMON: CVE-2020-6024 //
JVNDB: JVNDB-2020-015676 //
CNNVD: CNNVD-202101-1562 //
NVD: CVE-2020-6024
PROBLEMTYPE DATA
| problemtype: | CWE-269 | Trust: 1.1 |
| problemtype: | CWE-114 | Trust: 1.0 |
| problemtype: | Improper authority management (CWE-269) [NVD Evaluation ] | Trust: 0.8 |
sources:
VULHUB: VHN-184149 //
JVNDB: JVNDB-2020-015676 //
NVD: CVE-2020-6024
THREAT TYPE
local
Trust: 0.6
sources:
CNNVD: CNNVD-202101-1562
TYPE
other
Trust: 0.6
sources:
CNNVD: CNNVD-202101-1562
PATCH
| title: | sk142952 | url: | https://supportcontent.checkpoint.com/solutions?id=sk142952 | Trust: 0.8 |
| title: | Check Point Smartconsole Repair measures for privilege escalation vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=139933 | Trust: 0.6 |
sources:
JVNDB: JVNDB-2020-015676 //
CNNVD: CNNVD-202101-1562
EXTERNAL IDS
| db: | NVD | id: | CVE-2020-6024 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2020-015676 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202101-1562 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-184149 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2020-6024 | Trust: 0.1 |
sources:
VULHUB: VHN-184149 //
VULMON: CVE-2020-6024 //
JVNDB: JVNDB-2020-015676 //
CNNVD: CNNVD-202101-1562 //
NVD: CVE-2020-6024
REFERENCES
| url: | https://supportcontent.checkpoint.com/solutions?id=sk142952 | Trust: 1.8 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2020-6024 | Trust: 1.4 |
| url: | https://vigilance.fr/vulnerability/check-point-smartconsole-privilege-escalation-34398 | Trust: 0.6 |
| url: | https://cwe.mitre.org/data/definitions/269.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
sources:
VULHUB: VHN-184149 //
VULMON: CVE-2020-6024 //
JVNDB: JVNDB-2020-015676 //
CNNVD: CNNVD-202101-1562 //
NVD: CVE-2020-6024
SOURCES
| db: | VULHUB | id: | VHN-184149 |
| db: | VULMON | id: | CVE-2020-6024 |
| db: | JVNDB | id: | JVNDB-2020-015676 |
| db: | CNNVD | id: | CNNVD-202101-1562 |
| db: | NVD | id: | CVE-2020-6024 |
LAST UPDATE DATE
2024-11-23T21:51:03.707000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-184149 | date: | 2021-02-02T00:00:00 |
| db: | VULMON | id: | CVE-2020-6024 | date: | 2021-02-02T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-015676 | date: | 2021-10-08T09:11:00 |
| db: | CNNVD | id: | CNNVD-202101-1562 | date: | 2021-02-09T00:00:00 |
| db: | NVD | id: | CVE-2020-6024 | date: | 2024-11-21T05:35:00.187 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-184149 | date: | 2021-01-20T00:00:00 |
| db: | VULMON | id: | CVE-2020-6024 | date: | 2021-01-20T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-015676 | date: | 2021-10-08T00:00:00 |
| db: | CNNVD | id: | CNNVD-202101-1562 | date: | 2021-01-20T00:00:00 |
| db: | NVD | id: | CVE-2020-6024 | date: | 2021-01-20T19:15:12.947 |