Check Point
Monthly
Information disclosure in Check Point Identity Agent for Terminal Services allows an authenticated local user with read access to debug files to obtain sensitive identity data in plaintext and potentially claim another user's security policy rules. Exploitation is local, requires valid credentials and the presence of debug output, making it primarily an insider or post-compromise issue; EPSS is 0.12% (2nd percentile) and no public exploit identified at time of analysis. This is a moderate-risk, low-priority confidentiality issue rather than an urgent threat.
Information disclosure in Check Point Identity Agent for Terminal Services allows an authenticated local user with read access to debug files to obtain sensitive identity data in plaintext and potentially claim another user's security policy rules. Exploitation is local, requires valid credentials and the presence of debug output, making it primarily an insider or post-compromise issue; EPSS is 0.12% (2nd percentile) and no public exploit identified at time of analysis. This is a moderate-risk, low-priority confidentiality issue rather than an urgent threat.