Authenticated Administrator Role-Based Access Control Bypass in Compliance
En bref
Sévérité
MEDIUM 4.1
EPSS
EPSS 3.73 % · centile 90 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
checkpoint
Statut NVD
Awaiting Analysis
Description
When Compliance is enabled on Check Point Multi-Domain Management, an authenticated administrator with read-write access to one Management Domain (CMA) can modify stored metadata associated with Compliance Best Practices in another Management Domain, where the administrator has no access permissions, bypassing Role-Based Access Control (RBAC).
affected R82.10 with Jumbo Hotfix Take 6 or below ; affected R82 with Jumbo Hotfix Take 91 or below ; affected R81.20 with Jumbo Hotfix Take 127 or below ; affected All releases from R81.10 and below
