Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Secomea Component: Gatemanager Clear all filters
TI-2023-00302 CVE-2023-0317 · GHSA-xf23-wgv8-93v6

GateManager debug interface is included in non-debug builds

Priority LOW 23

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00521 Published 2023-04-19 Fixed in 10.1 CWE-420
TI-2022-03946 CVE-2022-4308 · GHSA-xr26-qphw-jcg8

Clear-text passwords in configuration files

Priority LOW 39

Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0017 Published 2023-04-19 Fixed in 10.1 CWE-256
TI-2022-02550 CVE-2022-2752 · GHSA-6cwc-7j5r-rwvf

Potential vulnerabilities in GM login process

Priority LOW 33

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00183 Published 2022-12-09 Fixed in 10.0 CWE-287
TI-2022-17830 CVE-2022-38123 · GHSA-q365-6hx4-82gp

Insufficient validation of plugin files

Priority MEDIUM 41

Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00796 Published 2022-12-06 Fixed in 10.0 CWE-20
TI-2022-09358 CVE-2022-25786 · GHSA-q4gh-2cv2-8pcv

GateManager debug interface is included in production builds

Priority LOW 24

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00737 Published 2022-05-04 Fixed in 9.7 CWE-420
TI-2021-11989 CVE-2021-32009 · GHSA-wm49-p28j-wfgv

Missing XSS guards on firmware page

Priority LOW 28

Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00495 Published 2022-03-11 No fix listed CWE-79
TI-2021-11986 CVE-2021-32006 · GHSA-xf56-6gfr-p968

GateManager information leak for LinkManager Users

Priority LOW 24

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.0064 Published 2022-03-07 No fix listed CWE-274