high7.5
CVE-2022-25787
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection.
Impact
Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijack connection. This issue affects: Secomea GateManager all versions prior to 9.7.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Secomea | Gatemanager 4250 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 4260 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 8250 Firmware | before 9.7.622134021 |
| Secomea | Gatemanager 9250 Firmware | before 9.7.622134021 |