CVE-2022-25779CWE-779

Insufficient scope checks allows adding unrelated audit log entries

Medium · published May 4, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secomea GateManager versions prior to 9.7.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.5th percentile
Weakness
CWE-779 · Logging of Excessive Data
Published
2022-05-04T13:51Z
EPSS history
Timeline
  • 04 MAY 13:51Z
    Insufficient scope checks allows adding unrelated audit log entries
    cvelistv5