CVE-2025-8305
Full vulnerability record from the local CVENow database.
Description
An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plaintext in Identity Agent for Terminal Services debug files.
Severity
MEDIUM
CVSS score
6.5
(v3.1)
Vulnerability status
Deferred
Source identifier
Published
2025-12-22 08:15:46.190000
Last modified
2026-10-19 22:10:00.130000
View original CVE JSON
{
"id": "CVE-2025-8305",
"sourceIdentifier": "[email protected]",
"published": "2025-12-22T08:15:46.190",
"lastModified": "2026-10-19T22:10:00.130",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plaintext in Identity Agent for Terminal Services debug files."
},
{
"lang": "es",
"value": "Un usuario local autenticado puede obtener información que le permite reclamar las reglas de política de seguridad de otro usuario debido a que datos sensibles se imprimen en texto plano en los archivos de depuración de Identity Agent for Terminal Services."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "checkpoint",
"product": "Identity Awareness",
"versions": [
{
"version": "Check Point Identity Agent Multi User Host Agent under version 81.084.0000",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.0,
"impactScore": 4.0
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-12-22T13:55:20.829952Z",
"id": "CVE-2025-8305",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"references": [
{
"url": "https://support.checkpoint.com/results/sk/sk184264",
"source": "[email protected]"
}
]
}