CVE-2022-25787CWE-598

GTA URLs issued by LMM WEB API may leak information

High · published May 4, 2022

CVSS v3.1
7.5
EPSS
0%
Percentile
14.5
In the wild
Unconfirmed
What it is

Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00242 · 14.5th percentile
Weakness
CWE-598 · Use of HTTP Request With Sensitive Query String
Published
2022-05-04T13:58Z
EPSS history
Timeline
  • 04 MAY 13:58Z
    GTA URLs issued by LMM WEB API may leak information
    cvelistv5