Dell Secure Connect Gateway Vulnerability Could Lead to Information Disclosure

CVE-2023-44294

What is CVE-2023-44294?

A security concern has been identified in the Dell Secure Connect Gateway Application and Appliance, specifically within versions ranging from v5.10.00.00 to v5.18.00.00. This vulnerability allows a malicious user, who has a valid user session, to inject malicious content into the filters of the Collection Rest API. Consequently, this could lead to inadvertent disclosure of sensitive information from the product's database, raising significant security risks for users relying on these applications.

References