Lucene search

SecomeaCVELIST:CVE-2022-2752

HistoryDec 09, 2022 - 1:30 p.m.

CVE-2022-2752 Potential vulnerabilities in GM login process

2022-12-0913:30:26

CWE-287

Secomea

www.cve.org

cve-2022-2752

secomea gatemanager

web server

local user impersonation

version 9.4-9.7

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

AI Score

7.6

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

This issue affects:

Secomea GateManager versions from 9.4 through 9.7.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "GateManager",
    "vendor": "Secomea",
    "versions": [
      {
        "lessThan": "10.0",
        "status": "affected",
        "version": "9.4",
        "versionType": "custom"
      }
    ]
  }
]

References

www.secomea.com/support/cybersecurity-advisory

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

AI Score

7.6

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-2752