CVE-2025-2028
BaseFortify
Publication date: 2025-08-06
Last updated on: 2025-08-27
Assigner: Check Point Software Technologies Ltd.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| checkpoint | log_server | r81.10 |
| checkpoint | log_server | r81.20 |
| checkpoint | log_server | r82 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-295 | The product does not validate, or incorrectly validates, a certificate. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves a lack of TLS validation when downloading a CSV file that maps IP addresses to countries. This mapping is used only for displaying country flags in logs. Because TLS validation is missing, the download process could be intercepted or manipulated.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing an attacker to manipulate the CSV file used for displaying country flags in logs. While it does not affect confidentiality, it can impact the integrity of the displayed information and cause availability issues.