CVE-2022-25787
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - VulnerabilityReporting@secomea.com
- Published
- 2022-05-04
- Last modified
- 2024-08-03
- Weaknesses
- CWE-200, CWE-598
Affected products
- Gatemanager (Secomea)
- Gatemanager 4250 Firmware (Secomea)
- Gatemanager 4260 Firmware (Secomea)
- Gatemanager 8250 Firmware (Secomea)
- Gatemanager 9250 Firmware (Secomea)
References
- https://www.secomea.com/support/cybersecurity-advisory/
