CVE-2026-78339: Medium severity Dell Secure Connect Gateway (SCG) Policy Manager vulnerability
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Secure Connect Gateway (SCG) Policy Managerto a version that resolves this vulnerability.Fixed in 5.34.00.16
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires a low-privileged attacker with local access to Dell Secure Connect Gateway Policy Manager. The provided information does not indicate that remote or unauthenticated attackers can exploit it.
Which versions are affected?
Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16 are affected. Updating to version 5.34.00.16 or later addresses the affected version range described.
What could exploitation allow?
A successful exploit could lead to information disclosure, protection mechanism bypass, and unauthorized access. Availability impact is listed as none in the supplied severity vector.