{"id":"CVE-2025-8304","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-8304","generatedAt":"2026-10-28T03:25:03.143Z","title":"An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server.","description":"An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being accessible in the Windows Registry keys for Check Point Identity Agent running on a Terminal Server.","published":"2025-12-22T08:15:46.000Z","lastModified":"2026-10-19T22:10:00.000Z","status":"Deferred","sourceIdentifier":"cve@checkpoint.com","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N"},"cwe":["CWE-200"],"affected":[],"epss":{"score":0.00119,"percentile":0.01761,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.12%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.checkpoint.com/results/sk/sk184263","source":"cve@checkpoint.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-8304","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}