Check Point Security Gateway: Schwachstelle ermöglicht Offenlegung von Informationen

Summary

Product

Vulnerabilities 1

• High 8.6
  CVE-2024-24919 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Information disclosure

  Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

  Check Point Check Point Quantum Gateway, Spark Gateway and CloudGuard Network Network devices
  May 28, 2024

  KEV May 30, 2024

Revision history

1. 2024-06-26 #3

   Update des Checkpoint Advisories

2. 2024-06-02 #2

   CVSS Bewertung angepasst - Scope: Changed

3. 2024-05-30 #1

   Initiale Fassung

References

• NIST Vulnerability Database vom 2024-05-30
  https://nvd.nist.gov/vuln/detail/CVE-2024-24919
• Checkpoint Advisory vom 2024-05-30
  https://support.checkpoint.com/results/sk/sk182336
• Tenable Blog
  https://www.tenable.com/blog/cve-2024-24919-check-point-security-gateway-information-disclosure-zero-day-exploited-in-the
• Checkpoint Advisory Update vom 2024-06-25
  https://support.checkpoint.com/results/sk/sk182336