Executive Summary

This vulnerability is a local privilege escalation issue found in Check Point Identity Agent Full for Windows OS. It occurs because the software improperly handles executable resolution during the log collection process. An authenticated local user could exploit this flaw to execute arbitrary code with SYSTEM-level privileges on the affected Windows endpoint.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability allows an attacker who already has local access to the system to gain elevated privileges, specifically SYSTEM privileges. This means the attacker could execute any code with the highest level of permissions, potentially leading to full control over the affected Windows endpoint, compromising system integrity, confidentiality, and availability.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows an authenticated local user to execute arbitrary code with SYSTEM privileges, potentially leading to unauthorized access or control over sensitive data on the affected Windows endpoint.

Such unauthorized privilege escalation could compromise the confidentiality, integrity, and availability of sensitive information, which may impact compliance with data protection standards and regulations like GDPR and HIPAA that require strict access controls and protection of personal and health information.

Useful 0 Not Useful 0