VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 22, 2014· Updated Jun 17, 2026

CVE-2013-7304

CVE-2013-7304

Description

Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for client devices, which allows man-in-the-middle attackers to spoof SSL servers by presenting an arbitrary certificate during a session established by a client.

Affected products

2
  • Checkpoint/Endpoint Security Mi Server R732 versions
    cpe:2.3:a:checkpoint:endpoint_security_mi_server_r73:*:hfa2.5:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:checkpoint:endpoint_security_mi_server_r73:*:hfa2.5:*:*:*:*:*:*range: <=3.0.0
    • (no CPE)range: <= R73 3.0.0 HFA2.5

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.