← All advisories

Medium severity6.5NVD Advisory· Published Aug 6, 2025· Updated Jun 17, 2026

CVE-2025-2028

CVE-2025-2028

Description

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs

Affected products

4

Checkpoint/Log Server3 versions
cpe:2.3:a:checkpoint:log_server:r81.10:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:checkpoint:log_server:r81.10:*:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:log_server:r81.20:*:*:*:*:*:*:*
- cpe:2.3:a:checkpoint:log_server:r82:*:*:*:*:*:*:*
checkpoint/Check Point Management Log Serverv5
Range: versions R81.10, R81.20, R82

Patches

Vulnerability mechanics

References

1

support.checkpoint.com/results/sk/sk183349nvdVendor Advisory

News mentions

0

No linked articles in our index yet.