Sensitive Information Exposure in Check Point Identity Agent on Terminal Server
CVE-2025-8304

6.5MEDIUM

Key Information:

Vendor

Checkpoint
Status
Identity Agent
Vendor
CVE Published:
22 December 2025

What is CVE-2025-8304?

An authenticated local user can exploit a flaw in the Check Point Identity Agent, which resides on a Windows Terminal Server. This vulnerability allows access to sensitive information stored in the Windows Registry, potentially enabling the unauthorized user to claim or manipulate security policy rules associated with another individual. Ensuring robust security measures and timely updates is crucial to mitigate the risks associated with such exposures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Identity Agent Check Point Identity Agent Multi User Host Agent under version 81.084.0000

References

https://support.checkpoint.com/results/sk/sk184263

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.