CVE-2007-0471

🗓️ 24 Jan 2007 01:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 89 Views🌐 WEB

sre/params.php in Integrity Clientless Security component allows remote attackers to bypass security requirements

Reporter	Title	Published	Views	Family All 5
CheckPoint Security	ICS Scan Results Forgery Vulnerability (CVE-2007-0471)	10 Jan 200722:00	–	checkpoint_security
Cvelist	CVE-2007-0471	24 Jan 200701:00	–	cvelist
EUVD	EUVD-2007-0469	7 Oct 202500:30	–	euvd
NVD	CVE-2007-0471	24 Jan 200701:28	–	nvd
Prion	Authentication flaw	24 Jan 200701:28	–	prion

NVD

Node

Source	Link
securitytracker	www.securitytracker.com/id
checkpoint	www.checkpoint.com/downloads/latest/hfa/connectra/security_r62.html
checkpoint	www.checkpoint.com/downloads/latest/hfa/vpn1_security/vpn1_R62_Windows.html
secunia	www.secunia.com/advisories/23847
osvdb	www.osvdb.org/31655
updates	www.updates.checkpoint.com/fileserver/ID/7126/FILE/VPN-1_Hotfix1.pdf
vupen	www.vupen.com/english/advisories/2007/0276
securityfocus	www.securityfocus.com/archive/1/457621/100/0/threaded
securityreason	www.securityreason.com/securityalert/2179
securityfocus	www.securityfocus.com/archive/1/457683/100/0/threaded

Parameter	Position	Path	Description	CWE
Report	query param	sre/params.php	Authentication bypass via crafted Report parameter returning valid ICSCookie token.	CWE-264

23 Apr 2026 00:35Current

7High risk

Vulners AI Score7

CVSS 27.5

EPSS0.05593