CVE-2025-8304: Information Disclosure in Identity Agent Registry Keys
An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8304?
CVE-2025-8304 is considered to be of high severity due to the potential compromise of sensitive information related to security policy rules.
How do I fix CVE-2025-8304?
To mitigate CVE-2025-8304, ensure that sensitive Windows Registry keys related to Check Point Identity Agent are properly secured and access is restricted.
Who is affected by CVE-2025-8304?
CVE-2025-8304 affects authenticated local users of Check Point Identity Agent running on a Terminal Server, who can access sensitive information of other users.
What information can be exposed in CVE-2025-8304?
CVE-2025-8304 allows an authenticated user to obtain security policy rules of another user due to sensitive data being accessible in the Windows Registry.
Is there a workaround for CVE-2025-8304?
While a specific workaround is not detailed, restricting user access to the affected Windows Registry keys can help mitigate the risks associated with CVE-2025-8304.