CVE-2024-37131: Critical severity dell emc secure connect gateway policy manager vulnerability
SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application in the context of the authenticated user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37131?
CVE-2024-37131 is classified as a medium severity vulnerability due to its potential for exploitation by remote attackers.
How do I fix CVE-2024-37131?
To fix CVE-2024-37131, you should update SCG Policy Manager to the latest version provided in the security advisory.
Who is affected by CVE-2024-37131?
All versions of SCG Policy Manager are affected by CVE-2024-37131, allowing exploitation via an overly permissive Cross-Origin Resource Policy.
What type of vulnerability is CVE-2024-37131?
CVE-2024-37131 is categorized as a Cross-Origin Resource Policy (CORP) vulnerability.
What can an attacker do with CVE-2024-37131?
An attacker exploiting CVE-2024-37131 can perform malicious actions on the application as the context of the authenticated user.