topic sk181427 - Check Point response to CVE-2022-4450 and CVE-2022-4304 in General Topics

sk181427 - Check Point response to CVE-2022-4450 and CVE-2022-4304

Jerry — Thu, 07 Sep 2023 16:29:56 GMT

hi folks,

anyone particularly concerned about those CVE's? does anyone uses SSL Enc/Decr. on the GW and need OpenSSL to be bumped to the 1.1.1t or 4?

Re: sk181427 - Check Point response to CVE-2022-4450 and CVE-2022-4304

the_rock — Thu, 07 Sep 2023 20:00:17 GMT

Hey bro,

Just checked that sk and all it says is below. Not sure when it will be updated.

Andy

Re: sk181427 - Check Point response to CVE-2022-4450 and CVE-2022-4304

D_W — Wed, 20 Sep 2023 07:03:23 GMT

What blades/services are affected?!

Re: sk181427 - Check Point response to CVE-2022-4450 and CVE-2022-4304

Jerry — Wed, 20 Sep 2023 08:49:33 GMT

AFAIK:

What is known – and publicly documented – is the infrastructure of the Mobile Access Blade and related Multi-Portal used for terminating HTTPS connections on the gateway.

Another instance in Gaia terminating HTTPS connections is the Gaia Portal.

This portal is available on Management and Log servers as they are based on Gaia, as well on the gateway’s side.

The Security capabilities such as IPS and/or Application control are working independently of the multi-portal infrastructure, thus not vulnerable.