Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2020-29031

Insecure Direct Object Reference in GateManager WebUI can cause privilege escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Secomea

Description

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Secomea GateManager

  • All to < 9.2caffected

References