What’s Vulnerable › Vulnerabilities

CVE-2025-8304: Information Disclosure in Identity Agent Registry Keys

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-22 · updated 2026-10-19
• Weakness: CWE-200

Description

An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server.

Affected products

• checkpoint Identity Agent: Check Point Identity Agent Multi User Host Agent under version 81.084.0000

References

• https://support.checkpoint.com/results/sk/sk184263

Get alerted when CVE-2025-8304 or the next vulnerability affects your stack