medium5.0
CVE-2024-52885
The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to a…
Impact
The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkpoint | Mobile Access | All versions |
| Checkpoint | Remote Access Vpn | All versions |