Lucene search

SecomeaVULNRICHMENT:CVE-2024-1579

HistoryApr 29, 2024 - 1:27 p.m.

CVE-2024-1579 Insufficient seeding of random number generator

2024-04-2913:27:55

CWE-335

Secomea

github.com

cve-2024-1579

insufficient seeding

random number generator

secomea gatemanager

session hijacking

webserver modules.

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:secomea:gatemanager:-:*:*:*:*:*:*:*"
    ],
    "vendor": "secomea",
    "product": "gatemanager",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.2.62.4971020",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

www.secomea.com/support/cybersecurity-advisory/

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-1579