CVE-2022-2752

{"id": "CVE-2022-2752", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "VulnerabilityReporting@secomea.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 0.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-12-09T14:15:09.893", "references": [{"url": "https://www.secomea.com/support/cybersecurity-advisory", "tags": ["Vendor Advisory"], "source": "VulnerabilityReporting@secomea.com"}, {"url": "https://www.secomea.com/support/cybersecurity-advisory", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "VulnerabilityReporting@secomea.com", "description": [{"lang": "en", "value": "CWE-287"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions.\n\nThis issue affects:\n\nSecomea GateManager versions from 9.4 through 9.7.\n\n\n"}, {"lang": "es", "value": "Una vulnerabilidad en el servidor web de Secomea GateManager permite que un usuario local se haga pasar por el usuario anterior en algunas condiciones de inicio de sesi\u00f3n fallidas. Este problema afecta a: Versiones de Secomea GateManager desde la 9.4 hasta la 9.7."}], "lastModified": "2024-11-21T07:01:38.377", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:secomea:gatemanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E14D902-23AE-4E8E-862D-EC224215827B", "versionEndIncluding": "9.7", "versionStartIncluding": "9.4"}], "operator": "OR"}]}], "sourceIdentifier": "VulnerabilityReporting@secomea.com"}