CVE-1999-1204: Check Point Firewall-1

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Check Point Firewall-1 does not properly handle certain restricted keywords (e.g., Mail, auth, time) in user-defined objects, which could produce a rule with a default "ANY" address and result in access to more systems than intended by the administrator.

Affected products

• Check Point Firewall-1: any version

Published 1998-05-11. Last modified 2026-06-16.