CVE-2022-25782
04.05.2022, 14:15
Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7.Enginsight
| Vendor | Product | Version |
|---|---|---|
| secomea | gatemanager_4250_firmware | 𝑥 < 9.7.622134021 |
| secomea | gatemanager_4260_firmware | 𝑥 < 9.7.622134021 |
| secomea | gatemanager_8250_firmware | 𝑥 < 9.7.622134021 |
| secomea | gatemanager_9250_firmware | 𝑥 < 9.7.622134021 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-274 - Improper Handling of Insufficient PrivilegesThe software does not handle or incorrectly handles when it has insufficient privileges to perform an operation, leading to resultant weaknesses.
- CWE-269 - Improper Privilege ManagementThe software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.