Update: proof of concept on GitHub published. An information disclosure flaw in Check Point Security Gateways that have the Remote Access VPN or Mobile Access Software Blades enabled lets an attacker read certain information remotely, without logging in or any user interaction. Public exploit code is available, and attacks using this bug are happening.