This vulnerability involves improper control of filenames used in include or require statements within PHP code on the Checkpoint Quantum Security Gateway. Specifically, when the Identity Awareness blade is enabled with Browser-Based Authentication, an unauthenticated attacker may exploit this flaw to read internal files on the gateway. The affected versions include R82.10 with Jumbo Hotfix Take 19 or below, R82 with Jumbo Hotfix Take 91 or below, R81.20 with Jumbo Hotfix Take 127 or below, and all releases from R81.10 and below. The CVSS 3.1 base score is 7.5, indicating high severity, with an attack vector of network, low attack complexity, no privileges required, and no user interaction needed. The impact is confidentiality loss only, with no integrity or availability impact reported. No known exploits in the wild have been reported, and no official patch or remediation guidance is currently available.

An unauthenticated attacker can read certain internal files on the Quantum Security Gateway when the Identity Awareness blade is enabled with Browser-Based Authentication. This results in a confidentiality breach but does not affect integrity or availability. The vulnerability could expose sensitive configuration or system information that may aid further attacks.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling the Identity Awareness blade or Browser-Based Authentication feature if feasible to reduce exposure. Monitor vendor communications for updates on patches or mitigations.