Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NSecomea Gatemanager
APPSecomea< 10.0.622425017
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2021-32008CRITICAL9.9PL ✓same product
Path Traversal w Secomea GateManager — usuwanie plików systemowych
CVE-2022-38123HIGH8.7same product
Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server ad...
CVE-2022-4308MEDIUM6.1same product
Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse ...
CVE-2022-2752MEDIUM5.5same product
A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous us...
CVE-2022-25786MEDIUM4.9same product
Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obt...