CVE-2020-29022

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3

CVSS v3 5.3 MEDIUM
CVSS v2.0 5.0 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://www.secomea.com/support/cybersecurity-advisory/#2923	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:h:secomea:gatemanager_4250:-:*:*:*:*:*:*:*

cpe:2.3:o:secomea:gatemanager_4250_firmware:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:h:secomea:gatemanager_4260:-:*:*:*:*:*:*:*

cpe:2.3:o:secomea:gatemanager_4260_firmware:*:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:h:secomea:gatemanager_9250:-:*:*:*:*:*:*:*

cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:*

cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-02-16 16:15

Updated : 2021-02-26 18:58

NVD link : CVE-2020-29022

Mitre link : CVE-2020-29022

CVE.ORG link : CVE-2020-29022

JSON object : View

Products Affected

secomea

gatemanager_4260
gatemanager_9250
gatemanager_4250
gatemanager_8250
gatemanager_4250_firmware
gatemanager_9250_firmware
gatemanager_8250_firmware
gatemanager_4260_firmware

CWE

NVD-CWE-noinfo CWE-159

Improper Handling of Invalid Use of Special Elements

{"id": "CVE-2020-29022", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "VulnerabilityReporting@secomea.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2021-02-16T16:15:12.533", "references": [{"url": "https://www.secomea.com/support/cybersecurity-advisory/#2923", "tags": ["Vendor Advisory"], "source": "VulnerabilityReporting@secomea.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "VulnerabilityReporting@secomea.com", "description": [{"lang": "en", "value": "CWE-159"}]}], "descriptions": [{"lang": "en", "value": "Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3"}, {"lang": "es", "value": "Un fallo en la saneamiento del valor del encabezado del host en la salida del servidor web GateManager, podr\u00eda permitir a un atacante conducir ataques de envenenamiento de la cach\u00e9 web. Este problema afecta a Secomea GateManager todas las versiones anteriores a 9.3"}], "lastModified": "2021-02-26T18:58:56.277", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:secomea:gatemanager_4250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0DB6136A-5440-4980-940D-CD178DC219B8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:secomea:gatemanager_4250_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFA20EA3-F08F-4EEC-993D-CFF3B64FEF8D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:secomea:gatemanager_4260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9B546E62-81BB-4ED8-87C9-41BD79484AD0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:secomea:gatemanager_4260_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "048A7B3B-193A-475A-B764-AB6434757028"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:secomea:gatemanager_9250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "68DE2092-2EA1-4D49-84EB-20BE2CD7B113"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:secomea:gatemanager_9250_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1BAF966-A1EE-4B37-BE84-BF137449C6FF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:secomea:gatemanager_8250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5089C475-2013-4DF6-AD1E-12F576ACAE8E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:secomea:gatemanager_8250_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5E0BA172-4047-4D60-9F37-A81EC4622376", "versionEndExcluding": "9.3"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "VulnerabilityReporting@secomea.com"}