CVE-2024-1579 Insufficient seeding of random number generator
Insufficient PRNG seeding in Secomea GateManager allows attackers to hijack user sessions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-1579?
CVE-2024-1579 is a high-severity vulnerability in Secomea GateManager, published on 29 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.
Weakness: CWE-335
Which versions are affected by CVE-2024-1579?
How do I fix CVE-2024-1579?
No fix has been published for CVE-2024-1579 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-1579 being exploited?
There is no known exploitation of CVE-2024-1579 in the wild and no public exploit code.
Sources
Also known as GHSA-6cv6-hf8q-pxx2.