BID:22233

Multiple Check Point Products Integrity Clientless Security Security Bypass Vulnerability

Info

Multiple Check Point Products Integrity Clientless Security Security Bypass Vulnerability

Bugtraq ID:	22233
Class:	Design Error
CVE:	CVE-2007-0471
Remote:	Yes
Local:	No
Published:	Jan 25 2007 12:00AM
Updated:	Mar 19 2015 08:36AM
Credit:	Roni Bachar and Nir Goldshlager are credited with the discovery of this vulnerability.
Vulnerable:	Check Point Software VPN-1 Power/UTM Pro NGX R62 Check Point Software VPN-1 Power/UTM Pro NGX R61 Check Point Software VPN-1 Power/UTM Pro NGX R60 Check Point Software VPN-1 Power/UTM Pro NG AI R55W Check Point Software VPN-1 Power/UTM Pro NG AI R55 Check Point Software VPN-1 Power/UTM Express NGX R62 Check Point Software VPN-1 Power/UTM Express NGX R60 Check Point Software VPN-1 Power/UTM Express NG AI R55W Check Point Software VPN-1 Power/UTM Express NG AI R55 Check Point Software Connectra NGX R62 Check Point Software Connectra NGX R61 Check Point Software Connectra NGX R60 Check Point Software Connectra 2.0 Check Point VPN-1 Power/UTM Express NGX R61

Not Vulnerable:

Discussion

Multiple Check Point Products Integrity Clientless Security Security Bypass Vulnerability

Multiple Check Point products are prone to a security-bypass vulnerability.

An attacker can exploit this issue to access cookie data and then use it to bypass certain security restrictions. This issue may potentially allow an attacker to gain unauthorized access to the affected application.

Exploit / POC

Multiple Check Point Products Integrity Clientless Security Security Bypass Vulnerability

Attackers may exploit this issue using a browser.

Solution / Fix

Multiple Check Point Products Integrity Clientless Security Security Bypass Vulnerability

Solution:
The vendor released an advisory and various hotfixes to address this issue. Please see the references for more information.

Check Point Software Connectra 2.0