Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-24903

Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to the application with privileges of the compromised account. The attacker could retrieve the reset password token without authorization and then perform the password change.

Published

2024-03-01T14:15:53.320

Last Modified

2025-05-20T18:56:09.483

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.0 (HIGH)

Weaknesses
  • Type: Primary
    CWE-640
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dell policy_manager_for_secure_connect_gateway < 5.22.00.16 Yes
References