CVE-2009-2213
Gateway uses default "Allow" configuration for its authorization settings.
CVE-2009-0034
Chain: product does not properly interpret a configuration option for a system group, allowing users to gain privileges.