CVE-2024-24906
Description
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. Exploitation may lead to information disclosure, session theft, or client-side request forgery.
How to fix
- dell policy_manager_for_secure_connect_gateway5.22.00.16 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell policy_manager_for_secure_connect_gateway | v < 5.22.00.16 | 5.22.00.16 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.