Authentication Timeout Bypass in Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1

Authentication Timeout Bypass in Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1

CVE-2002-0428 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.

Learn more about our User Device Pen Test.