Hard-Coded Cryptographic Key Vulnerability in Dell EMC SCG Policy Manager

CVE-2022-34442

Summary

The Dell EMC SCG Policy Manager versions 5.10 to 5.12 are impacted by a hard-coded cryptographic key vulnerability. This security flaw allows an attacker with knowledge of the hard-coded sensitive information to gain unauthorized access to the system. Once exploited, the attacker could potentially log in with LDAP user privileges, posing significant risks to the confidentiality and integrity of the system. It is crucial for users of affected versions to apply available patches and updates to mitigate this risk.

References