Skip to main content

Zonealarm CVE-2020-6022

MEDIUM
Permission Issues (CWE-275)
2020-10-27 cve@checkpoint.com
Information Disclosure Zonealarm Checkpoint
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Oct 27, 2020 - 14:15 nvd
MEDIUM 5.5

DescriptionNVD

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware.

AnalysisAI

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-275. Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware. Affected products include: Checkpoint Zonealarm. Version information: version 15.8.139.18543.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Zonealarm

View all
CVE-2022-41604 HIGH POC
8.8 Sep 27

Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. Rated high sever
CVE-2019-8452 HIGH POC
7.8 Apr 22

A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security clien
CVE-2022-23743 HIGH
7.8 May 11

Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade proce
CVE-2020-6023 HIGH
7.8 Oct 27

Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in
CVE-2019-8455 HIGH
7.1 Apr 17

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its per
CVE-2019-8453 MEDIUM
5.5 Apr 17

Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write pe

Same weakness CWE-275 – Permission Issues

View all
CVE-2018-15379 CRITICAL POC
9.8
CVE-2017-17876 HIGH POC
7.5
CVE-2023-3759 CRITICAL POC
9.8
CVE-2023-5263 HIGH POC
8.8
CVE-2016-4288 HIGH POC
8.4
CVE-2023-6302 HIGH POC
7.2
CVE-2026-19190 HIGH POC
7.1
CVE-2026-19191 HIGH POC
7.1

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2020-6022 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy