Lucene search

SecomeaCVELIST:CVE-2024-1579

HistoryApr 29, 2024 - 1:27 p.m.

CVE-2024-1579 Insufficient seeding of random number generator

2024-04-2913:27:55

CWE-335

Secomea

www.cve.org

cve-2024-1579

insufficient seeding

random number generator

prng

session hijacking

secomea gatemanager

webserver modules

vulnerability

gatemanager 11.2.624071020

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

Percentile

9.0%

JSON

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Webserver"
    ],
    "product": "GateManager",
    "vendor": "Secomea",
    "versions": [
      {
        "lessThan": "11.2.624071020",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.secomea.com/support/cybersecurity-advisory/

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-1579