CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-29031

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.2%

CVSS Severity

CVSS v3 Score 7.1

CVSS v2 Score 5.5

References

Products affected by CVE-2020-29031

Secomea » Gatemanager 4250 » Version: N/A

cpe:2.3:h:secomea:gatemanager_4250:-
Secomea » Gatemanager 4260 » Version: N/A

cpe:2.3:h:secomea:gatemanager_4260:-
Secomea » Gatemanager 8250 » Version: N/A

cpe:2.3:h:secomea:gatemanager_8250:-
Secomea » Gatemanager 9250 » Version: N/A

cpe:2.3:h:secomea:gatemanager_9250:-
Secomea » Gatemanager 4250 Firmware » Version: N/A

cpe:2.3:o:secomea:gatemanager_4250_firmware:-
Secomea » Gatemanager 4260 Firmware » Version: N/A

cpe:2.3:o:secomea:gatemanager_4260_firmware:-
Secomea » Gatemanager 4260 Firmware » Version: 9.0g

cpe:2.3:o:secomea:gatemanager_4260_firmware:9.0g
Secomea » Gatemanager 8250 Firmware » Version: 9.1b

cpe:2.3:o:secomea:gatemanager_8250_firmware:9.1b
Secomea » Gatemanager 8250 Firmware » Version: 9.2

cpe:2.3:o:secomea:gatemanager_8250_firmware:9.2
Secomea » Gatemanager 8250 Firmware » Version: 9.2b

cpe:2.3:o:secomea:gatemanager_8250_firmware:9.2b
Secomea » Gatemanager 9250 Firmware » Version: N/A

cpe:2.3:o:secomea:gatemanager_9250_firmware:-
Secomea » Gatemanager 9250 Firmware » Version: 9.0g

cpe:2.3:o:secomea:gatemanager_9250_firmware:9.0g

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-29031

Products

Pricing

Contact Us