Vulnerability Details CVE-2023-28130
Local user may lead to privilege escalation using Gaia Portal hostnames page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.035
EPSS Ranking 86.9%
CVSS Severity
CVSS v3 Score 7.2
References
- http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html
- http://seclists.org/fulldisclosure/2023/Aug/4
- http://seclists.org/fulldisclosure/2023/Jul/43
- https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/
- https://support.checkpoint.com/results/sk/sk181311
- http://packetstormsecurity.com/files/173918/Checkpoint-Gaia-Portal-R81.10-Remote-Command-Execution.html
- http://seclists.org/fulldisclosure/2023/Aug/4
- http://seclists.org/fulldisclosure/2023/Jul/43
- https://pentests.nl/pentest-blog/cve-2023-28130-command-injection-in-check-point-gaia-portal/
- https://support.checkpoint.com/results/sk/sk181311
Products affected by CVE-2023-28130
-
cpe:2.3:a:checkpoint:gaia_portal:r80.40
-
cpe:2.3:a:checkpoint:gaia_portal:r81
-
cpe:2.3:a:checkpoint:gaia_portal:r81.10
-
cpe:2.3:a:checkpoint:gaia_portal:r81.20