Information disclosure in Checkpoint Identity Agent
CVE-2025-8304
An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal S…
Vulnerability class: Information Disclosure
EPSS: 0.001 (1.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.
Affected products
- Checkpoint Identity Agent — versions Check Point Identity Agent Multi User Host Agent under version 81.084.0000
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-8304?
- CVE-2025-8304 is a medium-severity vulnerability in Checkpoint Identity Agent, classified under Information Disclosure. CVSS score: 6.5/10. Published 2025-12-22.
- How severe is CVE-2025-8304?
- Medium severity. CVSS v3 base score is 6.5 out of 10.