Check Point UTM-1 Edge and Safe Multiple Security Vulnerabilities
BID:50189
Info
Check Point UTM-1 Edge and Safe Multiple Security Vulnerabilities
| Bugtraq ID: | 50189 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2011 12:00AM |
| Updated: | Nov 02 2012 07:20PM |
| Credit: | Richard Brain |
| Vulnerable: |
Check Point Software UTM-1 Edge 8.2.43 Check Point Software Safe 8.2.43 |
| Not Vulnerable: |
Check Point Software UTM-1 Edge 8.2.44 Check Point Software Safe 8.2.44 |
Discussion
Check Point UTM-1 Edge and Safe Multiple Security Vulnerabilities
Check Point UTM-1 Edge and Safe are prone to multiple security vulnerabilities, including:
1. Multiple cross-site scripting vulnerabilities
2. Multiple HTML-injection vulnerabilities
3. Multiple cross-site request forgery vulnerabilities
4. Multiple URI-redirection vulnerabilities
5. An information-disclosure vulnerability
An attacker may leverage these issues to access sensitive information, redirect an unsuspecting victim to an attacker-controlled site, or steal cookie-based authentication credentials, to perform unauthorized actions in the context of a user's session.
Versions prior to Check Point UTM-1 Edge and Safe 8.2.44 are vulnerable.
Check Point UTM-1 Edge and Safe are prone to multiple security vulnerabilities, including:
1. Multiple cross-site scripting vulnerabilities
2. Multiple HTML-injection vulnerabilities
3. Multiple cross-site request forgery vulnerabilities
4. Multiple URI-redirection vulnerabilities
5. An information-disclosure vulnerability
An attacker may leverage these issues to access sensitive information, redirect an unsuspecting victim to an attacker-controlled site, or steal cookie-based authentication credentials, to perform unauthorized actions in the context of a user's session.
Versions prior to Check Point UTM-1 Edge and Safe 8.2.44 are vulnerable.
Exploit / POC
Check Point UTM-1 Edge and Safe Multiple Unspecified Security Vulnerabilities
Attackers can exploit these issues using a browser or readily available tools. To exploit a cross-site scripting or URI-redirection issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
Attackers can exploit these issues using a browser or readily available tools. To exploit a cross-site scripting or URI-redirection issue, the attacker must entice an unsuspecting victim to follow a malicious URI.
Solution / Fix
Check Point UTM-1 Edge and Safe Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Check Point UTM-1 Edge and Safe Multiple Security Vulnerabilities
References:
References:
- Check Point Software Homepage (Check Point Software)
- Multiple vulnerabilities in WebUI of UTM-1 Edge and Safe@Office appliances (Check Point Software)