Liftoffsoftware Gateone
2 CVEs affecting Liftoffsoftware Gateone. Latest disclosed: 2020-12-27. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-20184 | Critical | 9.8 | 2020-12-14 | GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection. |
CVE-2020-35736 | High | 7.5 | 2020-12-27 | GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused. |