> Source: [sk123197](https://support.checkpoint.com/results/sk/sk123197)

# sk123197 - Check Point Response to Tenable Advisory ID:  TRA-2018-04 (Gaia OS Privilege Escalation)

| Property | Value |
|----------|-------|
| Solution ID | sk123197 |
| Date Created | 2018-02-27 |
| Last Modified | 2019-01-13 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server, Scalable Platforms |
| Versions | R82.10, R82, R81.20, R82.20 |
| OS | Gaia |

## Symptoms

- On February 27, 2018, a Tenable researcher published an advisory titled "Gaia OS Privilege Escalation" regarding the "show fcd" command:  
<https://www.tenable.com/security/research/tra-2018-04>

## Cause

Check Point had already discovered the issue internally before it was disclosed by Tenable, and a fix was put in place for our next major release.

The issue is considered of low priority since the vector is begun by an authenticated trusted user that is logged on locally to the Security Gateway or Security Management machine.

Following the report and the responsible disclosure, Check Point has worked to patch relevant versions.

## Solution

* Check Point R77.30 - Released R77.30 Jumbo Hotfix Accumulator Take_309 - refer to [sk106162](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk106162)
* Check Point R80.10 - Released R80.10 Jumbo Hotfix Accumulator Take_91 - refer to [sk116380](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380)
* Scalable Platforms - Released R76SP.50 Jumbo Hotfix Accumulator Take_44 � see [sk117633](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk117633)

#### Check Point Timeline

17-Nov-2017 - Vulnerability report arrived  
18-Nov-2017 - R\&D analyzed the issues reported and prioritized as low priority  
20-Nov-2017 - Check Point offered the researcher a private fix and that our ETA is a Jumbo HFA during Q1'2018.  
22-Nov-2017 - One issue is fixed internally  
05-Dec-2017 - Released (silently as the researcher hasn't yet published his findings) the first issue  
07-Dec-2017 - Completed fixing the other two issues  
26-Feb-2018 - Completed the release of all relevant Jumbo HFAs

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content