Lucene search

SecomeaCVE-2024-1579

HistoryApr 29, 2024 - 2:15 p.m.

CVE-2024-1579

2024-04-2914:15:08

CWE-335

Secomea

web.nvd.nist.gov

cve-2024-1579

incorrect usage of seeds

pseudo-random number generator

secomea gatemanager

webserver modules

session hijacking

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

Percentile

9.0%

JSON

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Webserver"
    ],
    "product": "GateManager",
    "vendor": "Secomea",
    "versions": [
      {
        "lessThan": "11.2.624071020",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.secomea.com/support/cybersecurity-advisory/

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-1579