383 matches found
CVE-2020-29027
Cross-site Scripting XSS vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3...
CVE-2020-29024
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...
CVE-2020-29027
Cross-site Scripting XSS vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3...
CVE-2020-29023
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program like Excel. This issue affects: Secomea GateManager all...
CVE-2020-29022
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...
Session fixation
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...
Input validation
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program like Excel. This issue affects: Secomea GateManager all...
Cross site scripting
Cross-site Scripting XSS vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3...
Design/Logic Flaw
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...
CVE-2020-29027 Reflected Cross Site Scripting
Cross-site Scripting XSS vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3...
CVE-2020-29027
CVE-2020-29027 is a Cross-site Scripting (XSS) vulnerability in the GUI of Secomea SiteManager affecting all versions prior to 9.3. The connected documents confirm the flaw is in the SiteManager GUI and exposes users to XSS attacks, with no explicit exploitation details provided in the sources. T...
CVE-2020-29023
The CVE-2020-29023 issue affects Secomea GateManager (all versions prior to 9.3). The root cause is improper encoding/escaping in the CSV Report Generator, enabling CSV formula injection. An authenticated administrator can generate a CSV that, when opened in a spreadsheet (e.g., Excel), may execu...
CVE-2020-29023 CSV Formula Injection possible due to improper fields escaping in GateManager
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program like Excel. This issue affects: Secomea GateManager all...
CVE-2020-29022 Host Header Injection allowing web cache poisoning attacks
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...
CVE-2020-29024
The CVE-2020-29024 issue affects Secomea GateManager (GoToAppliance) prior to version 9.3, where cookies in HTTPS sessions can be exposed due to missing Secure attribute. This could allow an attacker to access sensitive cookies. The vulnerability is caused by insecure cookie handling in GoToAppli...
CVE-2020-29024 Missing HtppOnly and Secure flags
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in GTA GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3...
PT-2021-11634
Name of the Vulnerable Software and Affected Versions: Secomea SiteManager versions prior to 9.3 Description: A Cross-site Scripting XSS issue in the GUI of Secomea SiteManager could allow an attacker to cause an XSS attack. Recommendations: For versions prior to 9.3, update to version 9.3 or lat...
CVE-2020-29022: Improper Handling of Invalid Use of Special Elements
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...
CVE-2020-29027: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3...
CVE-2020-29023: Improper Encoding or Escaping of Output
Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program like Excel. This issue affects: Secomea GateManager all...