Dell Secure Connect Gateway
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:*:*:*
- >= 5.26.00, <= 5.30.00
A relative path traversal vulnerability has been identified in Dell Secure Connect Gateway (SCG) version 5.0, specifically in the Application and Appliance editions, within the range of versions 5.26.00.00 to 5.30.00.00. This vulnerability affects an internal collection download REST API, but only if the API is enabled by an admin user through the user interface. A low-privileged attacker with remote access could exploit this vulnerability to traverse relative paths and access restricted resources.
Exploitation of this vulnerability could lead to unauthorized access to restricted resources via relative path traversal.
Users can upgrade to Dell Secure Connect Gateway version 5.32.00 or later to address this vulnerability. Instructions for downloading the update are available on the Dell Secure Connect Gateway Application Edition and Virtual Edition product support pages.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.