VulnerabilityModified
CVE-2020-29022
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks.
MEDIUM 5.3EPSS 0.83%
Does this matter?
Lower severity and a low EPSS score (0.83%). Track it; it rarely justifies an emergency change on its own.
Description
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.83% probability · 56th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-159
- Affected
- secomea/gatemanager 4250 firmware · secomea/gatemanager 4260 firmware · secomea/gatemanager 9250 firmware · secomea/gatemanager 8250 firmware
- Source
- VulnerabilityReporting@secomea.com
References
- https://www.secomea.com/support/cybersecurity-advisory/#2923Vendor Advisory
- https://www.secomea.com/support/cybersecurity-advisory/#2923Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.