CVE-2024-24903

Summary

CVE-2024-24903 is a vulnerability affecting Dell Secure Connect Gateway (SCG) Policy Manager version 5.10 and above. The issue involves a weak password recovery mechanism that enables an adjacent network, low-privileged attacker to gain unauthorized access to the application. By retrieving the reset password token without authorization, the attacker can subsequently change the password, effectively compromising the account with the privileges of the hijacked identity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.