CVE-2025-2028

Lack of TLS validation

State: Published
Severity: 6.5 Medium
Published: Aug 6, 2025
Updated: Aug 6, 2025
Reserved: Mar 6, 2025

Description

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L	checkpoint

Weaknesses

CWE-295 Improper Certificate Validation.

Affected Products

Product	Versions
Check Point Management Log Servercheckpoint	versions R81.10, R81.20, R82Affected

References

https://support.checkpoint.com/results/sk/sk183349

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.