Sensitive Information Exposure in Check Point Identity Agent on Terminal Server

CVE-2025-8304

What is CVE-2025-8304?

An authenticated local user can exploit a flaw in the Check Point Identity Agent, which resides on a Windows Terminal Server. This vulnerability allows access to sensitive information stored in the Windows Registry, potentially enabling the unauthorized user to claim or manipulate security policy rules associated with another individual. Ensuring robust security measures and timely updates is crucial to mitigate the risks associated with such exposures.

References