What’s Vulnerable › Vulnerabilities
CVE-2025-8305: Information Disclosure in Identity Agent Debug Files
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-12-22 · updated 2026-10-19
- Weakness: CWE-200
Description
An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plaintext in Identity Agent for Terminal Services debug files.
Affected products
- checkpoint Identity Awareness: Check Point Identity Agent Multi User Host Agent under version 81.084.0000
References
Get alerted when CVE-2025-8305 or the next vulnerability affects your stack