PT-2022-17509 · Secomea · Secomea Gatemanager

Published 2022-05-04 · Updated 2022-05-11 · CVE-2022-25782

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Secomea GateManager versions prior to 9.7

Description The issue is related to improper handling of insufficient privileges in the Web UI of Secomea GateManager, allowing a logged-in user to access and update privileged information.

Recommendations For Secomea GateManager versions prior to 9.7, update to version 9.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the Web UI to minimize the risk of exploitation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-274

Related Identifiers

CVE-2022-25782

Affected Products

Secomea Gatemanager

References · 4

• https://osv.dev/vulnerability/CVE-2022-25782 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25782 · Security Note
• https://secomea.com/support/cybersecurity-advisory · Vendor Advisory
• https://t.me/cibsecurity/41924 · Telegram Post