CVE:CVE-2022-25787
CNNVD:CNNVD-202205-2115
Secomea GateManager是丹麦Secomea公司的一款远程访问服务器产品。
Secomea GateManager 9.7 之前的所有版本存在安全漏洞，该漏洞源于 LMM API 的 GET 请求中的查询字符串信息暴露，允许系统管理员劫持连接。
solution:Upgrade secomea gatemanager_4250_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea gatemanager_4260_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea gatemanager_8250_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea gatemanager_9250_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021)