VULNERABILITY INTELLIGENCE

CVE-2020-29031

CVSS score7.1 HIGH
EPSS probability0.75%
CISA KEVNot currently listed
Published2021-02-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Description

An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c

Weakness classification

  • CWE-269: Improper Privilege Management
  • CWE-280: Improper Handling of Insufficient Permissions or Privileges

Primary references