CVE-2022-25782CWE-274

Insufficient privilege checks on object access and updates.

Medium · published May 4, 2022

CVSS v3.1
5.4
EPSS
1%
Percentile
41.9
In the wild
Unconfirmed
What it is

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00500 · 41.9th percentile
Weakness
CWE-274 · Improper Handling of Insufficient Privileges
Published
2022-05-04T13:54Z
EPSS history
Timeline
  • 04 MAY 13:54Z
    Insufficient privilege checks on object access and updates.
    cvelistv5