CVE-2022-2752

MEDIUM

Secomea GateManager 9.4-9.7 - Improper Authentication via Failed Login Condition

Title source: llm
STIX 2.1

Description

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7.

References (1)

Core 1

Scores

CVSS v3 5.5
EPSS 0.0018
EPSS Percentile 7.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-287
Status published
Products (1)
secomea/gatemanager 9.4 - 9.7
Published Dec 09, 2022
Tracked Since Feb 18, 2026