2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","modules":["Webserver"],"product":"GateManager","vendor":"Secomea","versions":[{"lessThan":"11.2.624071020","status":"affected","version":"0","versionType":"custom"}]}],"source":"VulnerabilityReporting@secomea.com"},{"affectedData":[{"cpes":["cpe:2.3:a:secomea:gatemanager:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"gatemanager","vendor":"secomea","versions":[{"lessThan":"11.2.62.4971020","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.\n\n"},{"lang":"es","value":"El uso incorrecto de semillas en la vulnerabilidad del generador de números pseudoaleatorios (PRNG) en Secomea GateManager (módulos de servidor web) permite el secuestro de sesión. Este problema afecta a GateManager: antes de 11.2.624071020."}],"id":"CVE-2024-1579","lastModified":"2026-06-17T07:04:34.260","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":5.9,"source":"VulnerabilityReporting@secomea.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-1579","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-04-29T14:34:13.948903Z","version":"2.0.3"}}]},"published":"2024-04-29T14:15:08.120","references":[{"source":"VulnerabilityReporting@secomea.com","url":"https://www.secomea.com/support/cybersecurity-advisory/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.secomea.com/support/cybersecurity-advisory/"}],"sourceIdentifier":"VulnerabilityReporting@secomea.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-335"}],"source":"VulnerabilityReporting@secomea.com","type":"Secondary"}]}
|