Dell Secure Connect Gateway Vulnerability Could Lead to Information Disclosure

CVE-2023-44293

Summary

A vulnerability exists in the Dell Secure Connect Gateway Application and Appliance, particularly affecting versions between v5.10.00.00 and v5.18.00.00. This security issue allows an authenticated malicious user to inject harmful content into the filters of the IP Range Rest API. As a result, there is a risk of unintentional information disclosure from the product's database, posing potential security and privacy risks to users. It is imperative for organizations using these affected versions to assess their exposure and apply necessary updates to mitigate the risk associated with this vulnerability.

References