Check Point Endpoint Security MI Server through R73 3.0.0 HFA2.5 does not configure X.509 certificate validation for client devices, which allows man-in-the-middle attackers to spoof SSL servers by presenting an arbitrary certificate during a session established by a client.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Endpoint_security_mi_server_r73 | Checkpoint | * | 3.0.0 (including) |