← Back

CVE-2024-24914

nvd nist
Published: Nov 7, 2024Modified: Jun 17, 2026

JSON object

Loading...
8.0
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.1 / Impact: 5.9
Source: cve@checkpoint.com (Secondary)

Description

Authenticated Gaia users can inject code or commands by global variables through special HTTP requests. A Security fix that mitigates this vulnerability is available.

Affected (3)

Products: Checkpoint: Gaia Os
Checkpoint
1 product
Gaia Os
Configuration A
3 vulnerable · 8 platform
Vulnerable SoftwareAffected Versions
Checkpoint
Gaia Os
Version r81.10
Gaia Os
Version r81.20
Gaia Os
Version r81
Running on/withPlatform Versions
Checkpoint
Clusterxl
All versions
Checkpoint
Multi Domain Management
All versions
Checkpoint
Quantum 6700
All versions
Checkpoint
Quantum Maestro
All versions
Checkpoint
Quantum Scalable Chassis
All versions
Checkpoint
Quantum Security Gateway
All versions
Checkpoint
Quantum Security Management
All versions
Checkpoint
Quantum Spark
All versions

Related CWEs

CWE-914
Improper Control of Dynamically-Identified Variables
The product does not properly restrict reading from or writing to dynamically-identified variables.

References (1)

Source: cve@checkpoint.com
Vendor Advisory

Timeline

No history available yet.