Unrated severityNVD Advisory· Published Feb 14, 2024· Updated Aug 14, 2024

CVE-2023-44294

Description

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially lead to unintentional information disclosure from the product database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/Secure Connect Gatewayllm-create2 versions
>=5.10.00.00, <=5.18.00.00+ 1 more
- (no CPE)range: >=5.10.00.00, <=5.18.00.00
- (no CPE)range: v5.10.00.00
Dell/Secure Connect Gateway (SCG) 5.0 Appliance - SRSllm-fuzzy2 versions
>=5.10.00.00, <=5.18.00.00+ 1 more
- (no CPE)range: >=5.10.00.00, <=5.18.00.00
- (no CPE)range: v5.10.00.00

Patches

Vulnerability mechanics

References

www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilitiesmitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000