CVE-2024-52885

Path Traversal PUBLISHED

Description (CNA)

The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway.

Affected (CNA)

Vendor / product	Versions
checkpoint / Check Point Mobile Access	affected Check Point Mobile Access versions R81.10, R81.20, R82

CWE

CWE-35

References

https://support.checkpoint.com/results/sk/sk183137

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.