# Mobile Access File Share applications are vulnerable to directory traversal attacks

Please read this important update from Check Point.

Security Alert:

- **Severity**: Medium
- **Product**: Mobile Access / SSL VPN
- **Version**: R81.10 (EOS), R81.20, R82
- **OS**: Gaia
- **Last Modified**: 2025-08-06

## Symptoms

- The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway.

Additionally, an authenticated, malicious end-user may create arbitrary files with 'nobody' permissions on the Mobile Access gateway's '/tmp' folder.

Access to file contents does not seem possible via the attack described above, as the vulnerable API is capable of directory listing and file upload only.

- This issue received the ID [CVE-2024-52885](https://www.cve.org/CVERecord?id=CVE-2024-52885)

## Solution

This problem was fixed.  The fix is included in:

- [Jumbo Hotfix Accumulator for R82](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) starting from Take 36
- [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 111
- [Jumbo Hotfix Accumulator for R81.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/Default.htm) starting from Take 177

## Article Properties

- **Access Level**: General
- **Severity**: Medium
- **Status**: Approved
- **Date Created**: 2025-02-12
- **Last Modified**: 2025-08-06