Low Privilege Attacker Could Discover Exposed Credentials and Access the System

CVE-2024-48016

Summary

The vulnerability identified in the Dell Secure Connect Gateway 5.0 Appliance - SRS version 5.24 arises from the use of a broken or risky cryptographic algorithm. This flaw enables a low privileged attacker with remote access to potentially exploit the vulnerability, which may lead to unauthorized information disclosure. The exposed credentials could allow the attacker to gain access to the system as the compromised account, thereby raising significant security concerns.

References