CVE-2020-6020

Published: Sep 24, 2020Modified: Jun 17, 2026

6.4

Vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Exploitability: 0.9 / Impact: 5.5

Source: NVD

Description

Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.

Affected (10)

Products: Checkpoint: Ica Management Portal

1 product

Ica Management Portal

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Ica Management Portal	Before r80.20
Checkpoint Ica Management Portal	Version r80.20
Checkpoint Ica Management Portal	Version r80.20 take_156

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Ica Management Portal	Before r80.30
Checkpoint Ica Management Portal	Version r80.30
Checkpoint Ica Management Portal	Version r80.30 take_200

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Ica Management Portal	Before r80.40
Checkpoint Ica Management Portal	Version r80.40

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Checkpoint Ica Management Portal	Before r80.10
Checkpoint Ica Management Portal	Version r80.10

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://supportcontent.checkpoint.com/solutions?id=sk142952

Source: cve@checkpoint.com

Vendor Advisory

https://supportcontent.checkpoint.com/solutions?id=sk142952

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.