Known Vulnerabilities for Gateone by Liftoffsoftware
Listed below are 2 of the newest known vulnerabilities associated with "Gateone" by "Liftoffsoftware".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-35736 json | GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join ... | 7.5 - HIGH | 2020-12-27 | 2020-12-29 |
| CVE-2020-20184 json | GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an S... | 9.8 - CRITICAL | 2020-12-14 | 2021-07-21 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Liftoffsoftware | Gateone | 1.1 |