All the vulnerabilites related to checkpoint - Check Point Quantum Gateway, Spark Gateway and CloudGuard Network
cve-2024-24919
Vulnerability from cvelistv5
Published
2024-05-28 18:22
Modified
2024-08-01 23:36
Severity ?
EPSS score ?
Summary
Information disclosure
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | checkpoint | Check Point Quantum Gateway, Spark Gateway and CloudGuard Network |
Version: Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20. |
|
{ "containers": { "adp": [ { "affected": [ { "cpes": [ "cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*" ], "defaultStatus": "affected", "product": "quantum_security_gateway_firmware", "vendor": "checkpoint", "versions": [ { "status": "affected", "version": "r80.40" }, { "status": "affected", "version": "r81" }, { "status": "affected", "version": "r81.10" }, { "status": "affected", "version": "r81.20" } ] }, { "cpes": [ "cpe:2.3:a:checkpoint:cloudguard_network:r80.40:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "cloudguard_network", "vendor": "checkpoint", "versions": [ { "status": "affected", "version": "r80.40" }, { "status": "affected", "version": "r81" }, { "status": "affected", "version": "r81.10" }, { "status": "affected", "version": "r81.20" } ] }, { "cpes": [ "cpe:2.3:a:checkpoint:quantum_spark_appliances:r80.40:*:*:*:*:*:*:*" ], "defaultStatus": "unknown", "product": "quantum_spark_appliances", "vendor": "checkpoint", "versions": [ { "status": "affected", "version": "r80.40" }, { "status": "affected", "version": "r81" }, { "status": "affected", "version": "r81.10" }, { "status": "affected", "version": "r81.20" } ] } ], "metrics": [ { "other": { "content": { "id": "CVE-2024-24919", "options": [ { "Exploitation": "active" }, { "Automatable": "yes" }, { "Technical Impact": "partial" } ], "role": "CISA Coordinator", "timestamp": "2024-05-31T04:00:11.841700Z", "version": "2.0.3" }, "type": "ssvc" } }, { "other": { "content": { "dateAdded": "2024-05-30", "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json" }, "type": "kev" } } ], "providerMetadata": { "dateUpdated": "2024-06-04T17:43:22.149Z", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP" }, "timeline": [ { "lang": "en", "time": "2024-05-30T00:00:00+00:00", "value": "CVE-2024-24919 added to CISA KEV" } ], "title": "CISA ADP Vulnrichment" }, { "providerMetadata": { "dateUpdated": "2024-08-01T23:36:20.565Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://support.checkpoint.com/results/sk/sk182336" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Check Point Quantum Gateway, Spark Gateway and CloudGuard Network", "vendor": "checkpoint", "versions": [ { "status": "affected", "version": "Check Point Quantum Gateway and CloudGuard Network versions R81.20, R81.10, R81, R80.40 and Check Point Spark versions R81.10, R80.20." } ] } ], "descriptions": [ { "lang": "en", "value": "Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1" }, "format": "CVSS", "scenarios": [ { "lang": "en", "value": "GENERAL" } ] } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-200", "description": "CWE-200: Exposure of Sensitive Information to an Unauthorized Actor", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2024-05-30T12:40:21.757Z", "orgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "shortName": "checkpoint" }, "references": [ { "url": "https://support.checkpoint.com/results/sk/sk182336" } ], "title": "Information disclosure" } }, "cveMetadata": { "assignerOrgId": "897c38be-0345-43cd-b6cf-fe179e0c4f45", "assignerShortName": "checkpoint", "cveId": "CVE-2024-24919", "datePublished": "2024-05-28T18:22:19.401Z", "dateReserved": "2024-02-01T15:19:26.279Z", "dateUpdated": "2024-08-01T23:36:20.565Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }