> Source: [sk180415](https://support.checkpoint.com/results/sk/sk180415)

# sk180415 - Check Point response to CVE-2020-13943 (Apache Tomcat HTTP2 Client)

| Property | Value |
|----------|-------|
| Solution ID | sk180415 |
| Date Created | 2022-12-22 |
| Last Modified | 2022-12-25 |
| Technical Level | General |
| Products | Security Gateway, Security Management Server, Multi-Domain Security Management Server |
| Versions | R81.20, R81.10 (EOS), R81.20, R81 (EOS), R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS), R81.20 |
| OS | Gaia |

## Solution

Check Point code is not vulnerable to [CVE-2020-13943](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13943) because it does not use the HTTP2 Client Header.

Recommendation:

* Do not use the HTTP/2 "ClientHandler" in your environment.

Related Article:

* [sk116022 - Check Point inspection of HTTP/2 protocol (RFC 7540)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116022)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content