CVE-2022-25779: Insufficient scope checks allows adding unrelated audit log entries
Published May 4, 2022
·Updated
Logging of Excessive Data vulnerability in audit log of Secomea GateManager allows logged in user to write text entries in audit log. This issue affects: Secomea GateManager versions prior to 9.7.
Affected Software
8 affected components
Secomea Gatemanager 4250 Firmware<9.7.622134021
Secomea Gatemanager 4250
Secomea Gatemanager 4260 Firmware<9.7.622134021
Secomea Gatemanager 4260
Secomea Gatemanager 8250 Firmware<9.7.622134021
Secomea Gatemanager 8250
Secomea Gatemanager 9250 Firmware<9.7.622134021
Secomea Gatemanager 9250
Event History
May 4, 2022
CVE Published
via MITRE·01:51 PM
Data Sourced
via MITRE·01:51 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-25779?
CVE-2022-25779 is a vulnerability that allows a logged-in user in Secomea GateManager to write text entries in the audit log, leading to excessive data logging.
2
Which versions of Secomea GateManager are affected by CVE-2022-25779?
Secomea GateManager versions prior to 9.7 are affected by CVE-2022-25779.
3
What is the severity level of CVE-2022-25779?
CVE-2022-25779 has a severity level of 4.3 (medium).
4
How can the vulnerability CVE-2022-25779 be fixed?
To fix CVE-2022-25779, it is recommended to update to Secomea GateManager version 9.7 or later.
5
Where can I find more information about CVE-2022-25779?
You can find more information about CVE-2022-25779 on the Secomea cybersecurity advisory page: https://www.secomea.com/support/cybersecurity-advisory/