CVE-2022-23767: SecureGate authentication bypass vulnerability
This vulnerability of SecureGate is SQL-Injection using login without password. A path traversal vulnerability is also identified during file transfer. An attacker can take advantage of these vulnerabilities to perform various attacks such as obtaining privileges and executing remote code, thereby taking over the victim’s system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-23767?
CVE-2022-23767 holds a high severity rating due to its potential for SQL injection and path traversal attacks.
How do I fix CVE-2022-23767?
To mitigate CVE-2022-23767, ensure that you update Hanssak SecureGate to version 3.5 and apply any relevant security patches.
What type of attack can CVE-2022-23767 enable?
CVE-2022-23767 can enable attackers to execute arbitrary SQL queries, gain unauthorized access, and perform path traversal to access sensitive files.
Which software versions are affected by CVE-2022-23767?
CVE-2022-23767 affects Hanssak SecureGate version 3.5 and Hanssak Weblink versions between 3.5.2 and 3.5.5.
What should I do if I am using software affected by CVE-2022-23767?
If you are using affected software versions, immediately update to the latest secure versions and review your security configurations.