CVE-2022-34441

Name of the Vulnerable Software and Affected Versions Dell EMC SCG Policy Manager versions 5.10 through 5.12

Description The issue is related to a Hard-coded Cryptographic Key, which could allow an attacker with knowledge of the hard-coded sensitive information to potentially exploit this vulnerability and gain admin privileges by logging into the system. An attacker could exploit this to elevate their privileges.

Recommendations For Dell EMC SCG Policy Manager versions 5.10 through 5.12, consider restricting access to sensitive areas of the system until a fix is available, and avoid using the hard-coded cryptographic key in any authentication processes. As a temporary workaround, consider disabling any features that rely on the hard-coded key to minimize the risk of exploitation.