CVE-2021-32004CWE-923

GateManager does not enforce strict hostname matching for WEB server

Low · published November 22, 2021

CVSS v3.1
3.7
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.

The record
Technical detail
CVSS v3.1
3.7 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00642 · 50.1th percentile
Weakness
CWE-923 · Improper Restriction of Communication Channel to Intended Endpoints
Published
2021-11-22T20:32Z
EPSS history
Timeline
  • 22 NOV 20:32Z
    GateManager does not enforce strict hostname matching for WEB server
    cvelistv5