CVE-2025-8305 - CVE House
Back to Database
Status published Medium CVE-2025-8305

Information Disclosure in Identity Agent Debug Files

Vulnerability Description

An authenticated local user can obtain information that allows claiming security policy rules of another user due to sensitive information being printed in plaintext in Identity Agent for Terminal Services debug files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-8305

Credits & Attribution

No credits recorded in the NVD database.

References

More from checkpoint

View All →
CVE-2025-9142
Local privilege escalation in Harmony SASE Windows Agent
High 7.5
CVE-2025-8304
Information Disclosure in Identity Agent Registry Keys
Medium 6.5
CVE-2025-3831
Exposed SFTP server
High 8.1
CVE-2025-2028
Lack of TLS validation
Medium 6.5
CVE-2024-52888
Stored-XSS
Medium 5.4

Affected Vendor

Affected Software

Identity Awareness
Vulnerable Versions:
Check Point Identity Agent Multi User Host Agent under version 81.084.0000

Timeline

Official Publish: December 22nd, 2025
Last Modified: December 22nd, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Weaknesses (CWE)

CWE-200

MITRE ATT&CK TTPs

T1213 Data from Information Repositories
Collection
T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1041 Exfiltration Over C2 Channel
Exfiltration