Design/Logic Flaw

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c...

CVE-2020-29031 Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c...

CVE-2020-29031

CVE-2020-29031 affects Secomea GateManager web UI. An Insecure Direct Object Reference allows an authenticated attacker to reset the password of any user in its domain or sub-domain via privilege escalation, impacting GateManager versions prior to 9.2c. The issue is evidenced across multiple sour...

CVE-2020-29026

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c...

CVE-2020-29026

The CVE describes a directory traversal flaw in GateManager’s file upload function. An authenticated administrator could read/write arbitrary Linux files in all GateManager versions prior to 9.2c. Root cause: improper validation during file upload leading to path traversal. Impact: partial confid...

CVE-2020-29031: Improper Handling of Insufficient Permissions or Privileges

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c...

Secomea GateManager 安全漏洞

Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in GateManager versions prior to 9.2c, which stems from an insecure direct object reference vulnerability that can be exploited by an attacker to reset the password of any user in his doma...

PT-2021-11638

Name of the Vulnerable Software and Affected Versions: GateManager versions prior to 9.2c Description: An Insecure Direct Object Reference issue exists in the web UI of the GateManager, allowing an authenticated attacker to reset the password of any user in its domain or any sub-domain via...

Secomea GateManager 路径遍历漏洞

GateManager is a cloud server product from Secomea. A directory traversal vulnerability in the file upload feature in all versions of GateManager prior to 92c allows an authenticated attacker with administrative privileges to read and write arbitrary files on the Linux file system...

PT-2021-11633

Name of the Vulnerable Software and Affected Versions: GateManager versions prior to 9.2c Description: A directory traversal issue exists in the file upload function, allowing an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system...

CVE-2020-29026: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c...

GateManager Cross-Site Scripting Vulnerability

GateManager is a VPN server from Secomea. A cross-site scripting vulnerability exists in the Web UI input field of GateManager versions prior to 9.3. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via the input script tag...

CVE-2020-29021

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3...

CVE-2020-29021

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3...

Design/Logic Flaw

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3...

CVE-2020-29021 Scripting tag chars < > not filtered in input fields could cause Cross-Site Scripting (XSS)

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3...

CVE-2020-29021

CVE-2020-29021 affects GateManager (Secomea VPN server). A vulnerability in the Web UI input field allows an authenticated attacker to trigger cross-site scripting by entering script tags. Versions prior to 9.3 are affected. The provided connected documents describe the issue as an XSS in GateMan...

CVE-2020-29021: Improper Input Validation

A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3...

PT-2021-11628

Name of the Vulnerable Software and Affected Versions: GateManager versions prior to 9.3 Description: A vulnerability in the web UI input field of GateManager allows an authenticated attacker to enter script tags that could cause Cross-Site Scripting XSS. Recommendations: For versions prior to 9....

Secomea GateManager 跨站脚本漏洞

GateManager is a VPN server from Secomea. A cross-site scripting vulnerability exists in the Web UI input field of GateManager versions prior to 9.3. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via the input script tag...