Lucene search

SecomeaCVE-2022-2752

HistoryDec 09, 2022 - 2:15 p.m.

CVE-2022-2752

2022-12-0914:15:09

CWE-287

Secomea

web.nvd.nist.gov

cve-2022-2752

secomea gatemanager

web server

vulnerability

local user

impersonation

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

This issue affects:

Secomea GateManager versions from 9.4 through 9.7.

Affected configurations

Nvd

Node

secomeagatemanagerRange9.4–9.7

VendorProductVersionCPE
secomeagatemanager*cpe:2.3:a:secomea:gatemanager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
secomea	gatemanager	*	cpe:2.3:a:secomea:gatemanager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "GateManager",
    "vendor": "Secomea",
    "versions": [
      {
        "lessThan": "10.0",
        "status": "affected",
        "version": "9.4",
        "versionType": "custom"
      }
    ]
  }
]

References

www.secomea.com/support/cybersecurity-advisory

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-2752