Check Point Mobile Access Directory Traversal Vulnerability in File Share Application

A directory traversal vulnerability has been identified in the File Share application of the Check Point Mobile Access Portal, available on the Mobile Access gateway. This vulnerability allows an authenticated user, with access to at least one File Share application, to list file names in 'nobody'-accessible directories on the gateway. Additionally, such a user can create arbitrary files with 'nobody' permissions in the '/tmp' directory on the gateway.

Impact

Exploitation of this vulnerability could lead to unauthorized directory listing and file creation with 'nobody' permissions on the affected gateway.

Remediation

This vulnerability has been fixed in the Jumbo Hotfix Accumulator for R82 (starting from Take 36), R81.20 (starting from Take 111), and R81.10 (starting from Take 177).