安全研究
CVE-2024-24919 Check Point VPN 任意文件读取：暴露在公网的管理面
Thinking
2024-05-15
2 分钟阅读
研究档案
#漏洞分析#代码审计#网络攻击
Check Point 的 SSL Network Extender 把 /clients/MyCRL 端点暴露在公网，且未做认证——一个 POST 请求就能读到 /etc/passwd。配合 Censys 与 nuclei 模板，这种『管理面默认信任』的疏漏在互联网上被批量收割。
Unlock to view this content.
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