CVE-2025-3831: Exposed SFTP server
Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3831?
CVE-2025-3831 has been rated as a high severity vulnerability due to the risk of unauthorized access to sensitive log files.
How do I fix CVE-2025-3831?
To fix CVE-2025-3831, ensure that access to log files is restricted and follow the security recommendations provided by Check Point.
What software versions are affected by CVE-2025-3831?
CVE-2025-3831 affects all versions of Check Point Harmony SASE that allow log file uploads during troubleshooting.
What risks are associated with CVE-2025-3831?
CVE-2025-3831 exposes sensitive information which could lead to data breaches if accessed by unauthorized individuals.
Is there a workaround for CVE-2025-3831?
While there is no official workaround for CVE-2025-3831, limiting access to log files and implementing stricter security controls can help mitigate the risk.