Administrator credential disclosure via retained process memory

Cleartext credential storage in Check Point SmartConsole R81.10, R81.20, and R82 allows physically proximate attackers to recover credentials. SmartConsole retains used authentication credentials in its process memory instead of clearing them, leaving the values recoverable from a process dump. Exploitation requires Administrator permissions, user interaction to create the dump, and physical access under the CNA assessment; recovered credentials can enable access to managed environments.