description: Check Point ZoneAlarm version 15.3.064.17729 and below expose a WCF service that can allow a local low privileged user to execute arbitrary code as SYSTEM.
problem types: CWE-863: Incorrect Authorization
affected:
{
product: ZoneAlarm
vendor: Check Point Software Technologies Ltd.
versions:
status: affected, version: prior to version 15.3.064.17729
}