CVE-2021-30358

Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
checkpointCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
VendorProductVersion
checkpointmobile_access_portal_agent
r80.20
checkpointmobile_access_portal_agent
r80.30
checkpointmobile_access_portal_agent
r80.40
checkpointmobile_access_portal_agent
r81.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://supportcontent.checkpoint.com/solutions?id=sk142952
https://supportcontent.checkpoint.com/solutions?id=sk175806
https://supportcontent.checkpoint.com/solutions?id=sk142952
https://supportcontent.checkpoint.com/solutions?id=sk175806