Lucene search

SecomeaCVELIST:CVE-2020-29026

HistoryFeb 15, 2021 - 3:48 p.m.

CVE-2020-29026

2021-02-1515:48:30

CWE-22

Secomea

www.cve.org

directory traversal

file upload

administrative permissions

linux

gatemanager

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

39.7%

JSON

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c.

CNA Affected

[
  {
    "product": "GateManager",
    "vendor": "Secomea",
    "versions": [
      {
        "lessThan": "9.2c",
        "status": "affected",
        "version": "All",
        "versionType": "custom"
      }
    ]
  }
]

References

www.secomea.com/support/cybersecurity-advisory/#2918

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

39.7%

JSON

Related for CVELIST:CVE-2020-29026