sk181427 - Check Point response to CVE-2022-4450 and CVE-2022-4304

[Jerry]

hi folks,

anyone particularly concerned about those CVE's? does anyone uses SSL Enc/Decr. on the GW and need OpenSSL to be bumped to the 1.1.1t or 4?

[the_rock]

Hey bro,

Just checked that sk and all it says is below. Not sure when it will be updated.

Andy

 

[D_W]

What blades/services are affected?!

[Jerry · Accepted solution]

AFAIK:

What is known – and publicly documented – is the infrastructure of the Mobile Access Blade and related Multi-Portal used for terminating HTTPS connections on the gateway.  

Another instance in Gaia terminating HTTPS connections is the Gaia Portal.

This portal is available on Management and Log servers as they are based on Gaia, as well on the gateway’s side.

The Security capabilities such as IPS and/or Application control are working independently of the multi-portal infrastructure, thus not vulnerable.