Files
CVEs-PoC/2020/CVE-2020-29022.md
T
2024-05-25 21:48:12 +02:00

18 lines
759 B
Markdown

### [CVE-2020-29022](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29022)
![](https://img.shields.io/static/v1?label=Product&message=GateManager&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=all%3C%209.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-159%20Failure%20to%20Sanitize%20Special%20Element&color=brighgreen)
### Description
Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3
### POC
#### Reference
- https://www.secomea.com/support/cybersecurity-advisory/#2923
#### Github
No PoCs found on GitHub currently.