topic Check Point response to CVE-2024-24914 in Firewall and Security Management

Check Point response to CVE-2024-24914

the_rock — Tue, 19 Nov 2024 14:14:51 GMT

Hey guys,

I see this just came out today, hopefully there will be IPS protection soon.

Andy

Lesley — Tue, 19 Nov 2024 18:32:48 GMT

Always good to fix, but the SK says: "After logging in to Gaia Portal, authenticated users"

After this point an attacker has already a lot of access in the network. I hope all admin's restrict access to the gaia portal.

Only thing I can think of is that for example a read-only users logs in and uses this CVE to gain more access then only RO.

the_rock — Tue, 19 Nov 2024 20:24:04 GMT

Thats a good point, agree.