CVE-2022-2752

Summary

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

This issue affects:

Secomea GateManager versions from 9.4 through 9.7.

Affected Software

Weaknesses

• CWE-287: CWE-287 Improper Authentication

ADP Enrichment

CVE Program Container

Additional References

• https://www.secomea.com/support/cybersecurity-advisory

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.secomea.com/support/cybersecurity-advisory

• ←Previous
• Next→