CVE-2024-24914
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.
Severity
High 8
CVSS 3.1
Exploited
Not listed
EPSS
0.004
34.8th percentile
Discovered by
Not disclosed
Published
Nov 7, 2024
Assigned by checkpoint
Description
Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.
Weakness: CWE-914
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Check Point | Multi-Domain Security Management | Network & Security Management | cna-assigner |
| Check Point | Quantum Security Gateway | Firewall / NGFW | cna-assigner |
| Check Point | Quantum Security Management | Network & Security Management | cna-assigner |
Vendor-reported products (8)
- checkpoint · ClusterXL, Multi-Domain Security Management, Quantum Appliances, Quantum Maestro, Quantum Scalable Chassis, Quantum Security Gateways, Quantum Security Management
- checkpoint · clusterxl
- checkpoint · multi-domain_management
- checkpoint · quantum_appliances
- checkpoint · quantum_maestro
- checkpoint · quantum_scalable_chassis
- checkpoint · quantum_security_gateway
- checkpoint · quantum_security_management