Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Secomea GateManager 9.3 Clear all filters
TI-2020-17529 CVE-2020-29023 · GHSA-fw85-97w2-fp5v

CSV Formula Injection possible due to improper fields escaping in GateManager

Priority LOW 18

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00549 Published 2021-02-16 Fixed in 9.3 CWE-116
TI-2020-17528 CVE-2020-29022 · GHSA-r8qp-qwch-hgvw

Host Header Injection allowing web cache poisoning attacks

Priority LOW 26

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00832 Published 2021-02-16 Fixed in 9.3 CWE-159
TI-2020-17530 CVE-2020-29024 · GHSA-4m2f-xx7g-q89c

Missing HtppOnly and Secure flags

Priority LOW 25

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00531 Published 2021-02-16 Fixed in 9.3 CWE-614