SecurePoint UTM 12.x Session ID Leak

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: SecurePoint UTM Vendor URL: https://www.securepoint.de/en/for-companies/firewall-vpn Type: Exposure of Sensitive Information to an Unauthorized Actor CWE-200 Date found: 2023-01-05 Date...

CVE-2023-22620

creationtimestamp| type| source ---|---|--- 2023-04-13 02:29:41+00:00| seen| https://t.me/cibsecurity/62044 2023-04-14 13:24:16+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8116 2024-11-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2023-22620

An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid authentication attempt. This can afterwards be used to bypass the device's authentication and get access to the administrative interface...

CVE-2023-22620

CVE-2023-22620 affects SecurePoint UTM before 12.2.5.1. The vulnerability, reported in multiple feeds, is an information disclosure via the firewall’s /spcgi.cgi endpoint that can enable authentication bypass and grant access to the administrative interface. The Nuclei template confirms the issue...