---
id: 5127
title: "Vulnerabilities in Checkpoint ICA Management Tool"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/vulnerabilities-in-checkpoint-ica-management-tool/"
published_at: "2020-11-25T14:23:50Z"
tags: ["vulnerability-research", "cve", "command-injection", "checkpoint"]
phying_url: "https://phying.com/item/5127"
lang: en
---

# Vulnerabilities in Checkpoint ICA Management Tool

## Summary

Two flaws in Check Point's ICA Management Tool: an argument injection into the cpca process's sendmail invocation, and a shell command injection in the certificate management interface, plus notes on SSL configuration and exposure risks.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2020-11-25T14:23:50Z
- **Original:** https://swarm.ptsecurity.com/vulnerabilities-in-checkpoint-ica-management-tool/
- **Phying News:** https://phying.com/item/5127