VULNERABILITY INTELLIGENCE
CVE-2020-6020
CVSS score6.4 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2020-09-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Description
Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 Take 38, can be manipulated to run commands as a high privileged user or crash, due to weak input validation on inputs by a trusted management administrator.
Weakness classification
- cve@checkpoint.com: CWE-20
- nvd@nist.gov: CWE-20
Primary references
- cve@checkpoint.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory