Skip to content
OpenAdvisories
Medium · 5.0 CVE-2024-52885 EUVD-2024-54849GHSA-57xr-3wqm-x7w6

Path Traversal

Published Aug 6, 2025 · Updated Aug 6, 2025 · Assigned by checkpoint

Description

The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway.

Affected products

VendorProductAffectedFixed
checkpoint Check Point Mobile Access Check Point Mobile Access versions R81.10, R81.20, R82 —

References