CVE-2024-24914

CVSS 3.1 Score 8 of 10 (high)

Details

Published Nov 7, 2024
Updated: Nov 8, 2024
CWE ID 914

Summary

CVE-2024-24914 is a newly disclosed vulnerability that allows authenticated Gaia users to inject code or commands through the use of special HTTP requests by manipulating global variables. This issue poses a serious security risk as it can be exploited to gain unauthorized access or execute malicious code. Gaia users are advised to apply the available security fix to mitigate this vulnerability and protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Cluster XL
  • Checkpoint Security Gateway
  • Quantum Maestro

Affected Vendors

  • Check Point Software Technologies Ltd.