Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-44293

Опубликовано: 14 фев. 2024
Источник: nvd
CVSS3: 5.4
CVSS3: 6.5
EPSS Низкий

Описание

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially lead to unintentional information disclosure from the product database.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:*:*:*:*
Версия от 5.10.00.00 (включая) до 5.20.00.00 (исключая)

EPSS

Процентиль: 54%
0.00308
Низкий

5.4 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 6.5
github
больше 1 года назад

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially lead to unintentional information disclosure from the product database.

EPSS

Процентиль: 54%
0.00308
Низкий

5.4 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-89