Check Point: Quantum Gateway Information Disclosure: CVE-2024-24919

Check Point: Quantum Gateway Information Disclosure: CVE-2024-24919

Severity

8

CVSS

(AV:N/AC:L/Au:N/C:C/I:N/A:N)

Published

05/28/2024

Created

05/31/2024

Added

05/29/2024

Modified

06/03/2024

Description

A vulnerability in Check Point Security Gateways with IPSec VPN, Remote Access VPN and the Mobile Access software blade allows disclosure of information. The vendor advisory does not specify what information may be disclosed, but does recommend rotating passwords and certificates stored on the device. Check Point discovered this vulnerability while investigating attempts to gain unauthorized access to VPN products used by their customers.

Solution(s)

• checkpoint-cve-2024-24919

References

• https://attackerkb.com/topics/cve-2024-24919
• CVE - 2024-24919
• https://support.checkpoint.com/results/sk/sk182336
• https://www.rapid7.com/blog/post/2024/05/30/etr-cve-2024-24919-check-point-security-gateway-information-disclosure/