What is GHSA-q6j2-g8qf-wvf7?

GHSA-q6j2-g8qf-wvf7 is a security advisory published by GitHub Security Advisories with Medium severity. Verification check bypass in Gate One

Which CVE IDs does GHSA-q6j2-g8qf-wvf7 cover?

GHSA-q6j2-g8qf-wvf7 covers the following CVE IDs: CVE-2020-19003. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q6j2-g8qf-wvf7?

GHSA-q6j2-g8qf-wvf7 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-q6j2-g8qf-wvf7?

GHSA-q6j2-g8qf-wvf7 affects 1 product, including: pip/gateone:\u003c= 1.2.0.

GHSA-q6j2-g8qf-wvf7MediumCVSS 5.3

Verification check bypass in Gate One

Vendor

GitHub Security Advisories

Published

October 12, 2021

Last Modified

September 20, 2024

🔗 CVE IDs covered (1)

CVE-2020-19003 →

📋 Description

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.

🎯 Affected products1

pip/gateone:<= 1.2.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-19003
https://github.com/liftoff/GateOne/issues/728
https://github.com/advisories/GHSA-q6j2-g8qf-wvf7
https://github.com/pypa/advisory-database/tree/main/vulns/gateone/PYSEC-2021-423.yaml