CVE-2022-23767 SecureGate authentication bypass vulnerability
Attackers can bypass authentication via SQL injection and path traversal to gain privileges and execute remote code on SecureGate devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-23767?
CVE-2022-23767 is a high-severity authentication bypass vulnerability in HANSSAK Co.,Ltd SecureGate, published on 19 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
This vulnerability of SecureGate is SQL-Injection using login without password. A path traversal vulnerability is also identified during file transfer. An attacker can take advantage of these vulnerabilities to perform various attacks such as obtaining privileges and executing remote code, thereby taking over the victim’s system.
Which versions are affected by CVE-2022-23767?
It affects 2 products.
Products include Hanssak Securegate, Hanssak Weblink.
How do I fix CVE-2022-23767?
No fix has been published for CVE-2022-23767 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-23767 being exploited?
There is no known exploitation of CVE-2022-23767 in the wild and no public exploit code.
Sources
Also known as GHSA-pfjw-c288-q656.