CVE-2020-29022CWE-159

Host Header Injection allowing web cache poisoning attacks

Medium · published February 16, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00832 · 57.2th percentile
Weakness
CWE-159 · Improper Handling of Invalid Use of Special Elements
Published
2021-02-16T15:08Z
EPSS history
Timeline
  • 16 FEB 15:08Z
    Host Header Injection allowing web cache poisoning attacks
    cvelistv5