PT-2022-17514

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions prior to 9.7 Description The issue allows system administrators to hijack connections due to information exposure through query strings in GET requests in the LMM API of Secomea GateManager. Recommendations For...

PT-2022-17504

Name of the Vulnerable Software and Affected Versions Secomea GateManager affected versions not specified Description A Cross-Site Request Forgery CSRF issue in the Web UI of Secomea GateManager allows a phishing attacker to issue a GET request within a logged-in user's session. Recommendations A...

PT-2022-10061

Name of the Vulnerable Software and Affected Versions Secomea SiteManager versions prior to 9.7 Secomea LinkManager versions prior to 9.7 Secomea GateManager versions prior to 9.7 Description The issue is related to inadequate encryption strength in the TLS stack, which may facilitate...

PT-2022-17508

Name of the Vulnerable Software and Affected Versions Secomea GateManager affected versions not specified Description A Cross-site Scripting XSS issue in the Web UI of Secomea GateManager allows a phishing attacker to inject javascript or html into a logged-in user's session. Recommendations At t...

PT-2022-17505

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions prior to 9.7 Description The issue allows a logged-in user to write text entries in the audit log of Secomea GateManager due to a Logging of Excessive Data vulnerability. Recommendations For Secomea GateManager...

PT-2022-17509

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions prior to 9.7 Description The issue is related to improper handling of insufficient privileges in the Web UI of Secomea GateManager, allowing a logged-in user to access and update privileged information...

PT-2022-17510

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions prior to 9.7 Description The issue is related to insufficient logging in the web server of Secomea GateManager, allowing a logged-in user to issue improper queries without these actions being logged. Recommendation...

PT-2022-17507

Name of the Vulnerable Software and Affected Versions Secomea GateManager affected versions not specified Description The issue allows a logged-in user to query devices outside their own scope through the web UI of Secomea GateManager. This is an Information Exposure issue. Recommendations At the...

PT-2022-17513

Name of the Vulnerable Software and Affected Versions GateManager versions prior to 9.7 Description The issue is related to an Unprotected Alternate Channel vulnerability in the debug console of GateManager, allowing a system administrator to obtain sensitive information. Recommendations For...

CVE-2022-25783: Insufficient Logging

Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7...

CVE-2022-25786: Unprotected Alternate Channel

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7...

CVE-2022-25782: Improper Handling of Insufficient Privileges

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7...

CVE-2022-25780: Exposure of Sensitive Information to an Unauthorized Actor

Information Exposure vulnerability in web UI of Secomea GateManager allows logged in user to query devices outside own scope...

CVE-2021-32010: Inadequate Encryption Strength

Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle attacks. This issue affects: Secomea SiteManager All versions prior to 9.7. Secomea LinkManager versions prior to 9.7. Secomea GateManager versions prior to...

CVE-2022-25781: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session...

CVE-2022-25787: Use of GET Request Method With Sensitive Query Strings

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7...

CVE-2022-25779: Logging of Excessive Data

Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secomea GateManager versions prior to 9.7...

CVE-2021-32009

Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...

CVE-2021-32009

Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...

Cross site scripting

Cross-site Scripting XSS vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions...