Check Point Software Technologies IKEv2 IPsec VPN 权限许可和访问控制问题漏洞

漏洞信息详情

Check Point Software Technologies IKEv2 IPsec VPN是美国Check Point Software Technologies公司的一套基于IPSec协议的VPN（虚拟私人网络）软件。

Check Point Software Technologies IPSec VPN中存在安全漏洞。攻击者可借助IKEv2协议通道利用该漏洞绕过限制，进而提升权限。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk149892

来源:supportcenter.checkpoint.com

链接:https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk149892

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-8456

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Check-Point-IPSec-VPN-privilege-escalation-via-IKEv2-Tunnel-28964

暂无