Dell UCC Edge Blind Server-Side Request Forgery Vulnerability

A blind server-side request forgery (SSRF) vulnerability has been identified in Dell UCC Edge version 2.3.0. This vulnerability allows an unauthenticated attacker with local access to exploit the application by manipulating server-side requests, potentially leading to unauthorized actions or information disclosure on behalf of the server.

Impact

Exploitation of this vulnerability could lead to unauthorized server-side requests being made, which could be used to access internal resources or services that are not normally exposed to the public.

Remediation

Users can upgrade to Dell UCC Edge version 3.0.0 or later to address this vulnerability. The latest version can be downloaded from the Dell UCC Edge product support page.