4.1
Moyenne
CVE-2026-48136 When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access…
Description
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Quantum Security Management | Versions non publiées |
Autres CVE de Quantum Security Management
Les 7 CVE de Quantum Security Management →
CVE-2026-93616
Check Point Multiple Products Path Traversal Vulnerability
9.8
Critique
CVE-2026-91843
A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root…
9.8
Critique
CVE-2026-85103
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute…
9.8
Critique
CVE-2026-62145
A vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to…
7.5
Élevée