5.4
Medium
CVE-2023-44294 In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a…
Description
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially lead to unintentional information disclosure from the product database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Secure Connect Gateway-Application 5.10 | 5.10.00.00 → 5.18.00.00 | No fix stated |
| Secure Connect Gateway-Appliance 5.10 | 5.10.00.00 → 5.18.00.00 | No fix stated |
Other CVEs of Secure Connect Gateway-Application
The 9 CVEs of Secure Connect Gateway-Application →
CVE-2024-29169
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST…
5.4
Medium
CVE-2024-29168
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets…
5.4
Medium
CVE-2024-28969
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an…
4.3
Medium
CVE-2024-28968
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal…
5.4
Medium