Medium · 4.3 CVE-2022-25783 EUVD-2022-30423GHSA-qxxg-48jg-fwq3

Hacking attempts from logged-in users are not properly logged by GM

Published May 4, 2022 · Updated Aug 3, 2024 · Assigned by Secomea

Description

Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.

Affected products

Vendor	Product	Affected	Fixed
Secomea	GateManager	unspecified – < 9.7	9.7

References

https://www.secomea.com/support/cybersecurity-advisory/