Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2024-24914

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
checkpoint

Description

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

checkpoint ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management

  • Check Point Quantum Gateways versions R81, R81.10, R81.20affected

References