Firewall-1 does not properly filter script tags, which allows remote attackers to bypass the Strip Script Tags restriction by including an extra < in front of the SCRIPT tag.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Firewall-1 | Checkpoint | 3.0 (including) | 3.0 (including) |
References
