Check Point Identity Agent for Windows Terminal Server Security Policy Information Disclosure Vulnerability

A vulnerability exists in Check Point Identity Agent for Windows Terminal Server, specifically in versions R81.10, R81.20, and R82. An authenticated local user can access sensitive information in the Windows Registry that allows them to claim security policy rules assigned to another user. This issue affects both version 1 (MUH1) and version 2 (MUH2) of the Identity Agent for Terminal Server.

Impact

Exploitation of this vulnerability could lead to unauthorized access to security policy resources assigned to different users.

Remediation

Users can upgrade to Identity Agent for a Terminal Server version 81.084.0000 or later. The latest version can be downloaded from Check Point's support site (sk134312).