CVEvulnerability
CVE-2020-19003
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-10-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-290
Description
An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.
Affected configurations
• liftoffsoftware gate one 1.2.0
Related
Weakness · CWE (1)
- CWE-290 Authentication Bypass by Spoofing weakness
References
- https://cwe.mitre.org/data/definitions/290.html Technical Description
- https://github.com/liftoff/GateOne/issues/728 Exploit, Issue Tracking, Third Party Advisory
- https://cwe.mitre.org/data/definitions/290.html Technical Description
- https://github.com/liftoff/GateOne/issues/728 Exploit, Issue Tracking, Third Party Advisory