An authenticated administrator with read‑write privileges in one Management Domain can edit compliance metadata that belongs to a different domain where the administrator has no access permissions, bypassing RBAC. This flaw enables the attacker to alter records used for compliance verification. Based on the description, it is inferred that these unauthorized changes might impact audit reports.

Checkpoint Quantum Security Management is affected when Compliance is enabled in a Multi‑Domain Management environment. The vulnerability applies to all deployments that allow cross‑domain administrators to update compliance best practice metadata, but no specific software version is listed.

The CVSS score of 4.1 indicates moderate severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no well‑known widespread exploitation. The attack requires legitimate administrator credentials with write access in at least one domain; such accounts are typically privileged and limited in number. If an attacker obtains such credentials, they can change compliance data in other domains. The overall likelihood depends on the organization’s domain segregation and the number of cross‑domain users.