CVE-2007-0471
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.8%
sre/params.php in the Integrity Clientless Security (ICS) component in Check Point Connectra NGX R62 3.x and earlier before Security Hotfix 5, and possibly VPN-1 NGX R62, allows remote attackers to bypass security requirements via a crafted Report parameter, which returns a valid ICSCookie authentication token.
Produtos afetados
n/a · n/aReferências
http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051920.htmlhttp://osvdb.org/31655http://secunia.com/advisories/23847http://secureknowledge.checkpoint.com/SecureKnowledge/viewSolutionDocument.do?lid=sk32472http://securityreason.com/securityalert/2179http://securitytracker.com/id?1017559http://securitytracker.com/id?1017560https://exchange.xforce.ibmcloud.com/vulnerabilities/31646http://updates.checkpoint.com/fileserver/ID/7126/FILE/VPN-1_Hotfix1.pdfhttp://www.checkpoint.com/downloads/latest/hfa/connectra/security_r62.htmlhttp://www.checkpoint.com/downloads/latest/hfa/vpn1_security/vpn1_R62_Windows.htmlhttp://www.securityfocus.com/archive/1/457621/100/0/threaded