CVE-2024-28966
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an unauthorized user access to restricted resources and change of state.
Dell SCG, versiones anteriores a 5.24.00.00, contienen una vulnerabilidad de control de acceso inadecuado en el SCG expuesta para una API REST de actualización interna (si la habilita el usuario administrador desde la interfaz de usuario). Un atacante remoto con pocos privilegios podría explotar esta vulnerabilidad, lo que llevaría a la ejecución de ciertas API aplicables solo para usuarios administradores en la base de datos backend de la aplicación, lo que potencialmente podría permitir que un usuario no autorizado acceda a recursos restringidos y cambie de estado.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2024-03-13 CVE Reserved
- 2024-06-13 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-07 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dell Search vendor "Dell" | Secure Connect Gateway-Application Search vendor "Dell" for product "Secure Connect Gateway-Application" | >= 5.18.00.20 <= 5.22.00.18 Search vendor "Dell" for product "Secure Connect Gateway-Application" and version " >= 5.18.00.20 <= 5.22.00.18" | en |
Affected
| ||||||
Dell Search vendor "Dell" | Secure Connect Gateway-Appliance Search vendor "Dell" for product "Secure Connect Gateway-Appliance" | >= 5.18.00.20 <= 5.22.00.18 Search vendor "Dell" for product "Secure Connect Gateway-Appliance" and version " >= 5.18.00.20 <= 5.22.00.18" | en |
Affected
|