Check Point response to CVE-2024-24914

[the_rock]

Hey guys,

I see this just came out today, hopefully there will be IPS protection soon.

Andy

sk182743 - Check Point response to CVE-2024-24914 - TCL substitution of global parameter values

[Lesley]

Always good to fix, but the SK says: "After logging in to Gaia Portal, authenticated users"

After this point an attacker has already a lot of access in the network. I hope all admin's restrict access to the gaia portal. 

Only thing I can think of is that for example a read-only users logs in and uses this CVE to gain more access then only RO. 

[the_rock]

Thats a good point, agree.