Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-23767

SecureGate authentication bypass vulnerability

Description

This vulnerability of SecureGate is SQL-Injection using login without password. A path traversal vulnerability is also identified during file transfer. An attacker can take advantage of these vulnerabilities to perform various attacks such as obtaining privileges and executing remote code, thereby taking over the victim’s system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HANSSAK Co.,Ltd SecureGate

  • 3.5affected

HANSSAK Co.,Ltd WebLink

  • 3.5.2 to ≤ 3.5.5affected

References