GateManager vulnerabilities

7 known vulnerabilities in GateManager from Secomea. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  GateManager: Session Fixation

  CVE-2026-1758Sep 15, 2026Secomea

  Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above

• 8.2 High severity

  GateManager: Buffer Copy without Checking Size of Input

  CVE-2024-1969Apr 29, 2024Secomea

  Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Secomea GateManager (webserver modules) allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033.

• 8.1 High severity

  GateManager: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

  CVE-2024-1579Apr 29, 2024Secomea

  Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.

• 8.8 High severity

  GateManager: Insufficiently Protected Credentials

  CVE-2022-4308Apr 19, 2023Secomea

  Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.

• 7.8 High severity

  GateManager: Improper Authentication

  CVE-2022-2752Dec 9, 2022Secomea

  A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7.

• 7.2 High severity

  Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager…

  CVE-2022-38123Dec 6, 2022Secomea

  Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface. This issue affects: Secomea GateManager versions prior to 10.0.

• 8.8 High severity

  GateManager: Cross-Site Request Forgery

  CVE-2022-25778May 4, 2022Secomea

  Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.