CVE-2022-25783

Medium

Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging.…

Secomea·CWE-778·Published 2022-05-04

CVSS

4.3

EPSS

0.01

KEV

Exploits

cve.orgen

199 chars

Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.

NVDen

199 chars

Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. This issue affects: Secomea GateManager versions prior to 9.7.

Una vulnerabilidad de registro insuficiente en el servidor web de Secomea GateManager permite al usuario que ha iniciado la sesión realizar consultas indebidas sin registrarlas. Este problema afecta a: Las versiones de Secomea GateManager anteriores a la 9.7

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.1	Primary	cve.org	4.3	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	cve.org	4.3	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N