CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2020-29024
Medium (5.3) in secomea. EPSS 0.5% chance of exploitation in the next 30 days.
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-311, CWE-614
- Published
- Modified
- Record from
- the NVD, synced
Affected
- secomea:gatemanager_4250_firmware
- secomea:gatemanager_4260_firmware
- secomea:gatemanager_8250_firmware
- secomea:gatemanager_9250_firmware