7.8
High
CVE-2022-23742 Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a…
Description
Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Check Point Endpoint Security Client for Windows | Versions not published |