CVE-2002-2405: Check Point Firewall-1

Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days.

Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.

Affected products

• Check Point Firewall-1: version 4.1 only; version ng only

Published 2002-12-31. Last modified 2026-06-16.