PT-2025-32673 · Check Point · Harmony Sase Agent

Published 2025-08-12 · Updated 2025-08-12 · CVE-2025-3831

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Harmony SASE agent (affected versions not specified)

Description: Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Using Hardcoded Credentials

Weakness Enumeration

CWE-200

CWE-798

Related Identifiers

CVE-2025-3831

Affected Products

Harmony Sase Agent

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-3831 · Security Note
• https://support.checkpoint.com/results/sk/sk183761 · Vendor Advisory
• https://twitter.com/CVEnew/status/1955294333034233861 · Twitter Post