Check Point has disclosed a critical flaw in its Security Management and Log Servers that lets a network attacker with no credentials execute code as root. Because the Security Management Server controls firewall policy and admin access across an environment, a successful exploit could hand an outsider control of the whole security stack. The vendor has shipped a LivePatch fix and reports no evidence of active exploitation so far.
// source: thehackernews.com ↗