CVE-2014-1672

Check Point R75.47 Security Gateway and Management Server does not properly enforce Anti-Spoofing when the routing table is modified and the "Get - Interfaces with Topology" action is performed, which allows attackers to bypass intended access restrictions.

Score

CVSS 2.0 4.0 Medium

Status

Modified - cve@mitre.org

Published

2014-01-26

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Management Server (Checkpoint)
• Security Gateway (Checkpoint)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/90976
• https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98087