Description
The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attacker with access to the system could potentially exploit this vulnerability, leading to the disclosure of non-sensitive information that does not include any customer data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Secure Connect Gateway - Application | N/A – < 5.28.00 | 5.28.00 |
| Dell | Secure Connect Gateway - Appliance | N/A – < 5.28.00 | 5.28.00 |