CVE-2007-0471 — Checkpoint Connectra NGX vulnerability

CWE-2643 documents3 sources
Severity
7.5HIGHNVD
EPSS
5.6%
top 9.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Checkpoint Connectra NGX
Timeline
PublishedJan 24
Latest updateMay 1

Description

sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-qvrr-43x4-6h4w: sre/params↗2022-05-01
▶
CVEList
CVE-2007-0471: sre/params↗2007-01-24
▶
CVE-2007-0471 — Checkpoint Connectra NGX vulnerability | cvebase