CVE-2023-44293
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially lead to unintentional information disclosure from the product database.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - security_alert@emc.com
- Published
- 2024-02-14
- Last modified
- 2024-08-10
- Weaknesses
- CWE-89
Affected products
- Secure Connect Gateway (Dell)
- Secure Connect Gateway-appliance (Dell)
- Secure Connect Gateway-application (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-applica…
