CVE-2020-29024: Secomea Gatemanager 4250 Firmware

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3.

Affected products

• Secomea Gatemanager 4250 Firmware: any version
• Secomea Gatemanager 4260 Firmware: any version
• Secomea Gatemanager 8250 Firmware: before 9.3 (fixed in 9.3)
• Secomea Gatemanager 9250 Firmware: any version

Published 2021-02-16. Last modified 2026-06-17.