PT-2025-32174 · Unknown · Mobile Access Portal File Share

Published 2025-08-06 · Updated 2025-08-27 · CVE-2024-52885

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Mobile Access Portal File Share application (affected versions not specified)

Description The Mobile Access Portal's File Share application is susceptible to a directory traversal attack. An authenticated, malicious end-user with authorization to at least one File Share application can list file names within directories accessible to the 'nobody' user on the Mobile Access gateway.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

CWE-35

Related Identifiers

CVE-2024-52885

Affected Products

Mobile Access Portal File Share

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-52885 · Security Note
• https://support.checkpoint.com/results/sk/sk183137 · Vendor Advisory
• https://t.me/CVEtracker/29355 · Telegram Post
• https://t.me/cveNotify/133685 · Telegram Post
• https://twitter.com/CVEnew/status/1953113723230364139 · Twitter Post