SecomeaCVELIST:CVE-2020-29026CVE-2020-29026
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.8%
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c.
CNA Affected
[
{
"product": "GateManager",
"vendor": "Secomea",
"versions": [
{
"lessThan": "9.2c",
"status": "affected",
"version": "All",
"versionType": "custom"
}
]
}
]Related
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L
8.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.8%