A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows an unauthenticated remote attacker to bypass user authentication and establish a remote access VPN connection without a valid user password.

Уязвимость реализации протокола Internet Key Exchange (IKEv1) программных средств удаленного доступа Check Point Remote Access VPN, Check Point Mobile Access/SSL VPN и межсетевых экранов Check Point Spark, позволяющая нарушителю обойти существующие ограничения безопасности и установить VPN-соединение