A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

A weakness in the certificate validation logic of the deprecated IKEv1 key exchange may allow an unauthenticated attacker positioned as a man-in-the-middle to bypass certificate validation in VPN site-to-site connections that use certificate-based authentication. Successful exploitation could allow interception or modification of traffic traversing the VPN tunnel.

Уязвимость реализации протокола Internet Key Exchange (IKEv1) межсетевых экранов Check Point Security Gateways и Check Point Spark Firewall, позволяющая нарушителю проводить атаки типа "человек посередине" и обойти проверку сертификатов в VPN-соединении