Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-37131

SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application in the context of the authenticated user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell Secure Connect Gateway (SCG) Policy Manager

Default version status: unaffected

  • 5.18.20 to ≤ 5.22.00.18affected

References