topic CVE-2024-24912 in Endpoint

CVE-2024-24912

PhoneBoy — Wed, 01 May 2024 16:31:15 GMT

A local privilege escalation bug was discovered, responsibly disclosed, and fixed in E88.20 and above versions.
Our official response: https://support.checkpoint.com/results/sk/sk182244

Re: CVE-2024-24912

the_rock — Thu, 02 May 2024 00:19:25 GMT

Thanks for sharing!

Re: CVE-2024-24912

ertlden — Thu, 02 May 2024 06:27:50 GMT

hello together,
can someone tell me if the standalone client Checkpoint Mobile is also affected?

Re: CVE-2024-24912

_Val_ — Thu, 02 May 2024 06:50:51 GMT

Quoting from sk182244:

Harmony Endpoint Security Client for Windows versions E88.10 and lower

Re: CVE-2024-24912

Alain_ND — Tue, 07 May 2024 16:22:26 GMT

This was a cool bug and it was a pleasure working with CheckPoint on this responsible disclosure. We might provide technical details once some time has passed and all the updates have been applied.