Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Secomea GateManager 9.2c Clear all filters
TI-2020-17537 CVE-2020-29031 · GHSA-7x7m-6347-w9xm

Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation

Priority LOW 37

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privil…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00747 Published 2021-02-15 Fixed in 9.2c CWE-280
TI-2020-17532 CVE-2020-29026 · GHSA-2m67-gph7-q4xp

Path traversal in Secomea GateManager

Priority MEDIUM 42

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system.

CVSS 3.1CRITICAL 9.0 Network High privileges No interaction EPSS 0.01458 Published 2021-02-15 Fixed in 9.2c CWE-22