Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-29022 EUVD-2020-21404GHSA-r8qp-qwch-hgvw

Host Header Injection allowing web cache poisoning attacks

Published Feb 16, 2021 · Updated Sep 16, 2024 · Assigned by Secomea

Description

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3

Affected products

VendorProductAffectedFixed
Secomea GateManager all – < 9.3 9.3

References