Lucene search
HistoryApr 29, 2024 - 2:15 p.m.
CVE-2024-1579
vulnerability
prng
secomea gatemanager
session hijacking
webserver modules
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.
Related
cve
cve
CVE-2024-1579
2024-04-29 14:15:08
cvelist
cvelist
CVE-2024-1579 Insufficient seeding of random number generator
2024-04-29 13:27:55
vulnrichment
vulnrichment
CVE-2024-1579 Insufficient seeding of random number generator
2024-04-29 13:27:55
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2024-1579