Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
History

Thu, 05 Dec 2024 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:*:*:*:*
Vendors & Products Dell
Dell secure Connect Gateway

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published: 2024-03-01T13:24:01.513Z

Updated: 2024-08-01T23:28:13.121Z

Reserved: 2024-02-01T13:40:59.758Z

Link: CVE-2024-24904

cve-icon Vulnrichment

Updated: 2024-05-23T19:01:15.667Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-01T14:15:53.517

Modified: 2024-12-05T16:46:28.330

Link: CVE-2024-24904

cve-icon Redhat

No data.