Dell Secure Connect Gateway Policy Manager vulnerabilities

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit this to cause information disclosure, protection mechanism bypass, and unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a Server-Side Request Forgery (SSRF) vulnerability. A high-privileged attacker with remote access could exploit it to cause information disclosure, protection mechanism bypass, SSRF, and unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Authorization Bypass Through User-Controlled Key vulnerability. A low-privileged attacker with remote access could exploit it to achieve elevation of privileges.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could exploit it to cause denial of service, information disclosure, and remote execution.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low-privileged attacker with remote access could exploit it to achieve elevation of privileges, filesystem access, and remote execution.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could exploit it to achieve elevation of privileges, protection mechanism bypass, and unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, and Protection mechanism bypass.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Information tampering, and Protection mechanism bypass.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could exploit it, leading to information exposure.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and prior to 5.36 contain a Weak Encoding for Password vulnerability. A low-privileged attacker with local access could exploit it, leading to information disclosure, information tampering, protection mechanism bypass, and unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could exploit it, leading to information disclosure, information tampering, and protection mechanism bypass.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Insufficient Session Expiration vulnerability. A low-privileged attacker with adjacent network access could exploit it, leading to elevation of privileges, protection mechanism bypass, and unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Improper Restriction of Rendered UI Layers or Frames vulnerability (clickjacking). A low-privileged attacker with remote access could exploit it, leading to elevation of privileges and session theft.

Dell Secure Connect Gateway (SCG) Policy Manager versions 5.20, 5.22, 5.24, 5.26, 5.28 contain a Cross-site Scripting vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.