CVE-2021-30360CWE-427

Users have access to the directory where the installation repair occurs

published January 7, 2022

CVSS
—
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00570 · 46.4th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-01-07T22:39Z
EPSS history
Timeline
  • 07 JAN 22:39Z
    Users have access to the directory where the installation repair occurs
    cvelistv5