Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-44294 EUVD-2023-48650GHSA-3qw9-56c9-wgjp

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern h…

Published Feb 14, 2024 · Updated Aug 14, 2024 · Assigned by dell

Description

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API.
This issue may potentially lead to unintentional information disclosure from the product database.

Affected products

VendorProductAffectedFixed
Dell Secure Connect Gateway-Application v5.10.00.00 – ≤ v5.18.00.00 —
Dell Secure Connect Gateway-Appliance v5.10.00.00 – ≤ v5.18.00.00 —

References