CVE-2020-29029: Improper Input Validation

Improper Input Validation, Cross-site Scripting XSS vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4...

PT-2021-11639

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 9.4.621054022 Description: The issue allows an authenticated attacker to execute malicious code on the server due to the upload of code without an integrity check in the firmware archive of Secomea...

PT-2021-11637

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 9.4 Description: A Cross-Site Request Forgery CSRF issue in the web GUI of Secomea GateManager allows an attacker to execute malicious code. Recommendations: For versions prior to 9.4, update to version 9...

PT-2021-11636

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 9.4 Description: The issue is related to Improper Input Validation and a Cross-site Scripting XSS vulnerability in the Web GUI of Secomea GateManager. This allows an attacker to execute arbitrary javascri...

Secomea GateManager 跨站脚本漏洞

GateManager is a VPN server from Secomea. A cross-site scripting vulnerability exists in the web GUI of Secomea GateManager versions prior to 9.4. An attacker can exploit this vulnerability to inject arbitrary javascript code...

Secomea GateManager 跨站脚本漏洞

GateManager is a VPN server from Secomea. A cross-site scripting vulnerability exists in the web GUI of Secomea GateManager versions prior to 9.4. The vulnerability stems from improper input validation. An attacker can exploit the vulnerability to execute arbitrary javascript code...

Secomea GateManager 跨站请求伪造漏洞

GateManager is a VPN server from Secomea. A cross-site request forgery vulnerability exists in the web GUI of Secomea GateManager versions prior to 9.4. An attacker can exploit this vulnerability to execute malicious code...

Secomea GateManager 代码问题漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A file upload vulnerability exists in versions prior to Secomea GateManager 9.4.621054022, which stems from a code upload vulnerability without integrity checking that can be exploited by an attacker to execute malicious...

CVE-2020-29028: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4...

CVE-2020-29030: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4...

CVE-2020-29032: Download of Code Without Integrity Check

Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022...

PT-2021-11635

Name of the Vulnerable Software and Affected Versions: Secomea GateManager versions prior to 9.4 Description: A Cross-site Scripting XSS issue in the web GUI allows an attacker to inject arbitrary javascript code. Recommendations: For versions prior to 9.4, update to version 9.4 or later to resol...

GateManager Path Traversal Vulnerability

GateManager is a cloud server product from Secomea. A directory traversal vulnerability in the file upload feature in all versions of GateManager prior to 92c allows an authenticated attacker with administrative privileges to read and write arbitrary files on the Linux file system...

CVE-2020-29022

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...

CVE-2020-29024

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...

CVE-2020-29022

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...

CVE-2020-29023

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program like Excel. This issue affects: Secomea GateManager all...

CVE-2020-29023

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program like Excel. This issue affects: Secomea GateManager all...

Session fixation

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...

Input validation

Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program like Excel. This issue affects: Secomea GateManager all...