Update CVE-2024-24919.yaml

http/cves/2024/CVE-2024-24919.yaml

@@ -1,9 +1,13 @@
 id: CVE-2024-24919
 
 info:
-  name: CVE-2024-24919
+  name: Check Point R81, R80, R77, R75 - Arbitrary File Read
   author: johnk3r
-  severity: medium
+  severity: high
+  description: |
+    CVE-2024-24919 is an information disclosure vulnerability that can allow an attacker to access certain information on internet-connected Gateways which have been configured with IPSec VPN, remote access VPN or mobile access software blade.
+  reference:
+    - https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/
   metadata:
     max-request: 1
     vendor: checkpoint
@@ -21,8 +25,12 @@ http:
       - type: regex
         part: body
         regex:
-          - "root:"
-          - "cpep_user:"
+          - "monitor:\\*:"
+          - "root:\\*:"
+          - "cp_routeevt:\\*:"
+          - "cp_postgres:\\*:"
+          - "cp_extensions:\\*:"
+          - "cpep_user:\\*:"
 
       - type: status
         status: