Product:
Secure Connect Gateway
Summary
Dell Secure Connect Gateway contains a Relative Path Traversal vulnerability in the exposed REST API for internal collection downloads. If enabled by an Admin user, a low privileged attacker with remote access could exploit this vulnerability. This could lead to unauthorized access to restricted resources.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-46363 |
Exploitation
To exploit this vulnerability, an attacker must have remote access and the ability to interact with the REST API. By sending specially crafted requests, the attacker can manipulate the API to access files and directories that should be restricted, potentially leading to data exposure.
Affected Products
- Secure Connect Gateway 5.0 Application version 5.26.00.00 – 5.30.00.00
- Secure Connect Gateway Appliance version 5.26.00.00 – 5.30.00.00
Mitigation
To mitigate this vulnerability, it is recommended that administrators disable the REST API if it is not needed. Additionally, ensure that all software is updated to the latest version to protect against known vulnerabilities.