CVE-2024-52885

MEDIUM

Checkpoint Mobile Access - Authenticated Directory Traversal in File Share Application

Title source: llm

Description

The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway.

References (1)

Core 1

Core References

Vendor Advisory

https://support.checkpoint.com/results/sk/sk183137

Scores

CVSS v3 5.0

EPSS 0.0042

EPSS Percentile 33.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-22 CWE-35

Status published

Products (2)

checkpoint/mobile_access

checkpoint/remote_access_vpn

Published Aug 06, 2025

Tracked Since Feb 18, 2026