CVE-2020-29026 - A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system

Back Back to CVE browser

CRITICAL

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system

Published Feb 15, 2021

9.0

CRITICAL

CVSS 3.1

EPSS 1.46%

Description

A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c.

Affected products

Vendor Secomea Product GateManager Default
unknown
Affected
- ≥ All, < 9.2c

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Secomea	GateManager	unknown	Affected ≥ All, < 9.2c

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21408
Advisory
https://www.secomea.com/support/cybersecurity-advisory/#2918
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21408		Advisory
https://www.secomea.com/support/cybersecurity-advisory/#2918		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Secomea

Published Feb 15, 2021

Updated Aug 4, 2024

Reserved Nov 24, 2020

Link CVE-2020-29026

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-29026

Red Hat

No data

ENISA EUVD

Assigner Secomea

Published Feb 15, 2021

Updated Aug 4, 2024

Link EUVD-2020-21408

GitHub

No data