Vulnerabilities > CVE-2013-5635 - Credentials Management vulnerability in Checkpoint Endpoint Security

CVSS 3.3 - LOW

Attack vector

LOCAL

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

NONE

local

checkpoint

CWE-255

NVD

Published: 2013-11-30

Updated: 2013-12-02

Summary

Media Encryption EPM Explorer in Check Point Endpoint Security through E80.50 does not properly maintain the state of password failures, which makes it easier for physically proximate attackers to bypass the device-locking protection mechanism by entering password guesses within multiple Unlock.exe processes that are running simultaneously.

Vulnerable Configurations

Part	Description	Count
Application	Checkpoint Checkpoint Endpoint Security E80 Checkpoint Endpoint Security E80.10 Checkpoint Endpoint Security E80.20 Checkpoint Endpoint Security E80.30 Checkpoint Endpoint Security E80.40 Checkpoint Endpoint Security E80.41 Checkpoint Endpoint Security E80.50	7

Common Weakness Enumeration (CWE)

CWE-255 - Credentials Management

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References