NetSight
medium5.3

CVE-2020-29024

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access…

Impact

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3.

Affected products

VendorProductAffected versions
SecomeaGatemanager 4250 Firmware
All versions
SecomeaGatemanager 4260 Firmware
All versions
SecomeaGatemanager 9250 Firmware
All versions
SecomeaGatemanager 8250 Firmware
before 9.3

Weakness classification

References