1. Home
  2. CVE Database
  3. CVE-2020-29022
MEDIUM · 5.3

CVE-2020-29022

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior ...

Vulnerability Description

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SecomeaGatemanager 4250 FirmwareAll versions
SecomeaGatemanager 4250-
SecomeaGatemanager 4260 FirmwareAll versions
SecomeaGatemanager 4260-
SecomeaGatemanager 9250 FirmwareAll versions
SecomeaGatemanager 9250-
SecomeaGatemanager 8250 Firmware< 9.3
SecomeaGatemanager 8250-

Related Weaknesses (CWE)

CWE-159

References

FAQ

What is CVE-2020-29022?

CVE-2020-29022 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior ...

How severe is CVE-2020-29022?

CVE-2020-29022 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-29022?

Check the references section above for vendor advisories and patch information. Affected products include: Secomea Gatemanager 4250 Firmware, Secomea Gatemanager 4250, Secomea Gatemanager 4260 Firmware, Secomea Gatemanager 4260, Secomea Gatemanager 9250 Firmware.