CVE-2021-30361

Summary

The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a command that would run on the Gaia OS.

Affected Software

VendorProductVersion RangeStatus
n/aCheck Point Gaia Portalbefore Jumbo HFAs released 13-Apr-2022affected

Weaknesses

  • CWE-78: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

ADP Enrichment

CVE Program Container

Additional References

References