CVE-2024-37131

Katalog CVE

CVSS 9.8 · Critical EPSS 0,49%

Kerentanan Permissive Cross-domain Security Policy with Untrusted Domains pada dell policy manager for secure connect gateway. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application in the context of the authenticated user.

Rincian

Terbit di NVD

13 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-942: Permissive Cross-domain Security Policy with Untrusted Domains

EPSS (30 hari)

0,49% peluang dieksploitasi; lebih tinggi dari 40,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dell.com/support/kbdoc/en-us/000225956/dsa-2024-254-security-update-for-dell-secure-connect-gatewa... advisory vendor