Low · 3.7 CVE-2021-32004 EUVD-2021-18874GHSA-j65j-whg7-534r

GateManager does not enforce strict hostname matching for WEB server

Published Nov 22, 2021 · Updated Aug 3, 2024 · Assigned by Secomea

Description

This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allows attacker to cause browser cache poisoning.

Affected products

Vendor	Product	Affected	Fixed
Secomea	GateManager	All – < 9.6	9.6

References

https://www.secomea.com/support/cybersecurity-advisory/#4578