Path Traversal Vulnerability Allows Reading Data from System Resources
CVE-2023-3675

6.5MEDIUM

Key Information:

Vendor

Secomea

Status
Gatemanager
Vendor
CVE Published:
18 April 2024

What is CVE-2023-3675?

A path traversal vulnerability in the Secomea GateManager's Web GUI permits unauthorized reading of sensitive data from system resources. This flaw arises when the application improperly restricts access to certain directories, allowing attackers to manipulate file paths and gain access to restricted areas of the system. It primarily affects specific versions of GateManager, making it essential for users to update to the patched versions to mitigate potential security risks.

Affected Version(s)

GateManager Linux 11.0.623074018 < 11.0.623373051

References

https://www.secomea.com/support/cybersecurity-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.