VULNERABILITY INTELLIGENCE

CVE-2020-29026

CVSS score9 CRITICAL
EPSS probability1.46%
CISA KEVNot currently listed
Published2021-02-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L

Description

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c.

Weakness classification

  • VulnerabilityReporting@secomea.com: CWE-22
  • nvd@nist.gov: CWE-22

Primary references