Kosmosec

**Name of the Vulnerable Software and Affected Versions** Dell Secure Connect Gateway (SCG) Policy Manager version 5.10+ **Description** The issue is related to a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this, leading to unauthorized access to the application with privileges of the compromised account. The attacker could retrieve the reset password token without authorization and then perform the password change. **Recommendations** For version 5.10+, consider disabling the password recovery mechanism until a patch is available to prevent exploitation. Restrict access to the password reset functionality to minimize the risk of unauthorized password changes. Avoid using the password recovery feature in the affected version until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Dell Secure Connect Gateway (SCG) Policy Manager, all versions **Description** The issue is a Stored Cross-Site Scripting vulnerability that could be exploited by an adjacent network high privileged attacker, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browser, the malicious code gets executed by the web browser in the context of the vulnerable web application. This may lead to information disclosure, session theft, or client-side request forgery. **Recommendations** As a temporary workaround, consider restricting access to the Dell Secure Connect Gateway (SCG) Policy Manager until a patch is available. Restrict access to sensitive data stores to minimize the risk of exploitation. Avoid using the vulnerable application until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell Secure Connect Gateway (SCG) Policy Manager, all versions **Description** The issue is a Stored Cross-Site Scripting Vulnerability that could be exploited by an adjacent network high privileged attacker, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable web application. This may lead to information disclosure, session theft, or client-side request forgery. **Recommendations** As a temporary workaround, consider restricting access to the vulnerable application until a patch is available. Restrict access to the data store to minimize the risk of exploitation. Avoid using the vulnerable web application until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.