| Package | Affected versions | Patched versions |
|---|---|---|
| capsule docs standalone client | < e80.82 | e80.82 |
| endpoint security clients | < e80.83 | e80.83 |
| endpoint security server package | < r77.30.03 | r77.30.03 |
| jumbo hotfix for endpoint security server | < r77.30 | r77.30 |
| remote access clients | < e80.83 | e80.83 |
| smartconsole for endpoint security server | = e80.83< r77.30.03 | r77.30.03 |
Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the path. This can cause loading of a previously placed executable with a name similar to the parts of the path, instead of the intended one.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free