CVE-2021-32006: GateManager information leak for LinkManager Users

Q: What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2021-32006.

Q: Which versions of Secomea GateManager are affected by this vulnerability?

This vulnerability affects Secomea GateManager Version 9.6.621421014 and all prior versions.

Q: What is the severity of CVE-2021-32006?

The severity of CVE-2021-32006 is medium with a CVSS score of 4.3.

Q: What is the description of this vulnerability?

This vulnerability is a permission issues vulnerability in the LinkManager web portal of Secomea GateManager, which allows a logged-in LinkManager user to access stored SiteManager backup files.

Q: How can I fix CVE-2021-32006?

To fix CVE-2021-32006, it is recommended to upgrade to a version of Secomea GateManager that is not affected by this vulnerability.

Published Mar 7, 2022

Updated

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files.

Affected Software

1 affected component

Secomea GateManager<=9.6.621421014

Event History

Mar 7, 2022

CVE Published

via MITRE·03:08 PM

Data Sourced

via MITRE·03:08 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2021-32006.

Which versions of Secomea GateManager are affected by this vulnerability?

This vulnerability affects Secomea GateManager Version 9.6.621421014 and all prior versions.

What is the severity of CVE-2021-32006?

The severity of CVE-2021-32006 is medium with a CVSS score of 4.3.

What is the description of this vulnerability?

This vulnerability is a permission issues vulnerability in the LinkManager web portal of Secomea GateManager, which allows a logged-in LinkManager user to access stored SiteManager backup files.

How can I fix CVE-2021-32006?