CVE-2007-3464 | BDVDB-2026-24974 Detail

Description#

Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vectors.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12007-06-27Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.