Lucene search
HistoryDec 31, 2002 - 5:00 a.m.
CVE-2002-2405
CVSS2
4.9
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
52.2%
Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
Affected configurations
Node
checkpointfirewall-1Match4.1
ORcheckpointfirewall-1Matchng
| Vendor | Product | Version | CPE |
|---|---|---|---|
| checkpoint | firewall-1 | 4.1 | cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:* |
| checkpoint | firewall-1 | ng | cpe:2.3:a:checkpoint:firewall-1:ng:*:*:*:*:*:*:* |
CVSS2
4.9
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
52.2%
Related for NVD:CVE-2002-2405