Information Disclosure Vulnerability in Check Point Identity Agent for Terminal Services
CVE-2025-8305

6.5MEDIUM

Key Information:

Vendor

Checkpoint
Status
Identity Awareness
Vendor
CVE Published:
22 December 2025

What is CVE-2025-8305?

An authenticated local user can exploit a vulnerability in Check Point's Identity Agent for Terminal Services, allowing them to gain access to sensitive information. This information is improperly printed in plaintext within the application's debug files, potentially enabling the user to breach the security policies of other users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Identity Awareness Check Point Identity Agent Multi User Host Agent under version 81.084.0000

References

https://support.checkpoint.com/results/sk/sk184264

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.