exploitDog

CVE-2020-19003

Опубликовано: 06 окт. 2021

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.

Ссылки

https://cwe.mitre.org/data/definitions/290.html
Technical Description
https://github.com/liftoff/GateOne/issues/728
Exploit
Issue Tracking
Third Party Advisory
https://cwe.mitre.org/data/definitions/290.html
Technical Description
https://github.com/liftoff/GateOne/issues/728
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:liftoffsoftware:gate_one:1.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00214

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-290

Связанные уязвимости

GHSA-q6j2-g8qf-wvf7

CVSS3: 5.3

github

больше 4 лет назад

Verification check bypass in Gate One

EPSS

Процентиль: 44%

0.00214

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-290