CVE-2022-25782

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Improper Handling of Insufficient Privileges vulnerability in Web UI of Secomea GateManager allows logged in user to access and update privileged information. This issue affects: Secomea GateManager versions prior to 9.7.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
May 4, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-257834.3Insufficient Logging vulnerability in web server of Secomea GateManager allows logged in user to issue improper queries without logging. ThiCVE-2022-257844.8Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiCVE-2022-257857.2Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affectCVE-2022-257864.9Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. ThiCVE-2022-257876.7Information Exposure Through Query Strings in GET Request vulnerability in LMM API of Secomea GateManager allows system administrator to hijCVE-2022-257887.8A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulneraCVE-2022-257897.8A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerabilityCVE-2022-25795.4A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0. Affected is an unknown functCVE-2022-257907.8A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocCVE-2022-257917.8A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead toCVE-2022-257927.8A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocCVE-2022-257937.8A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper v
CVE-2022-25782: Medium severity, CVSS 5.4 | Vulnix