CVEvulnerability

CVE-2024-24900

7.3 HIGH Published 2024-03-01 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-03-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
CVSS 3.1 ([email protected])
7.3 HIGH — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-285

Description

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized devices added to policies. Exploitation may lead to information disclosure and unauthorized access to the system.

Affected configurations

• dell policy manager for secure connect gateway (< 5.22.00.16)

Related

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References