CVE-2022-2752CWE-287

Potential vulnerabilities in GM login process

Medium · published December 9, 2022

CVSS v3.1
5.5
EPSS
0%
Percentile
7.5
In the wild
Unconfirmed
What it is

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.

This issue affects:

Secomea GateManager versions from 9.4 through 9.7.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00183 · 7.5th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-12-09T13:30Z
EPSS history
Timeline
  • 09 DEC 13:30Z
    Potential vulnerabilities in GM login process
    cvelistv5