Dell Secure Connect Gateway Vulnerability Could Lead to Information Disclosure
CVE-2023-44294
Key Information:
- Vendor
Dell
- Vendor
- CVE Published:
- 14 February 2024
What is CVE-2023-44294?
A security concern has been identified in the Dell Secure Connect Gateway Application and Appliance, specifically within versions ranging from v5.10.00.00 to v5.18.00.00. This vulnerability allows a malicious user, who has a valid user session, to inject malicious content into the filters of the Collection Rest API. Consequently, this could lead to inadvertent disclosure of sensitive information from the product's database, raising significant security risks for users relying on these applications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Secure Connect Gateway-Appliance v5.10.00.00
Secure Connect Gateway-Application v5.10.00.00
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved