Information Disclosure Vulnerability in Check Point Identity Agent for Terminal Services
CVE-2025-8305

6.5MEDIUM

Key Information:

Vendor

Checkpoint
Status
Identity Awareness
Vendor
CVE Published:
22 December 2025

What is CVE-2025-8305?

An authenticated local user can exploit a vulnerability in Check Point's Identity Agent for Terminal Services, allowing them to gain access to sensitive information. This information is improperly printed in plaintext within the application's debug files, potentially enabling the user to breach the security policies of other users.

Affected Version(s)

Identity Awareness Check Point Identity Agent Multi User Host Agent under version 81.084.0000

References

https://support.checkpoint.com/results/sk/sk184264

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.