CVE-2023-28130

CVSS V2 None CVSS V3 None
Description
Local user may lead to privilege escalation using Gaia Portal hostnames page.
Overview
  • CVE ID
  • CVE-2023-28130
  • Assigner
  • checkpoint
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-07-26T10:57:02.708Z
  • Last Modified Date
  • 2023-07-30T15:19:58.435Z
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
References
Reference URL Reference Tags
https://support.checkpoint.com/results/sk/sk181311
https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/
http://seclists.org/fulldisclosure/2023/Jul/43
http://seclists.org/fulldisclosure/2023/Aug/4
http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-28130
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28130
History
Created Old Value New Value Data Type Notes
2024-06-25 10:56:09 Added to TrackCVE