authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management

In plain English

An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server. Successful exploitation may also allow command execution on managed Security Gateways. Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients. Affected products named by the advisory: Quantum Security Management. The official description indicates that exploitation does not require prior authentication. An authentication bypass can allow protected functionality to be reached without completing the intended identity checks.

Vulnerable items

• Quantum Security Management — Quantum Security Management is a Check Point management component used to administer connected systems or services.
• Multi-Domain Security Management — Multi-Domain Security Management is a Check Point management component used to administer connected systems or services.

Recommended action

Temporary workaround: Exploitation requires network access to the Management Server without firewall protection or a configuration that does not restrict Trusted Clients. No fixed release is recorded in the parsed advisory, so treat these controls as temporary until the vendor confirms a patched release.