Dell Secure Connect Gateway Policy Manager contains a use‑of‑non‑canonical URL paths for authorization decisions flaw. An attacker who can reach the appliance over the network does not need to be authenticated and can send specially crafted URLs to bypass authorization checks, potentially gaining unauthorized data or control access. The vulnerability can compromise the confidentiality and integrity of the system but does not directly affect availability.

All Dell Secure Connect Gateway Policy Manager installations, specifically versions older than 5.34.00.16. These releases are affected and have not yet received the security update that removes the non‑canonical URL handling issue.

The CVSS score of 3.7 indicates a low severity impact. EPSS is not available, and the vulnerability is not listed in CISA KEV. The likely attack vector is remote unauthenticated access over the network, and no public exploits have been reported. While the risk is moderate, the lack of known exploitation does not eliminate the need for remediation. An attacker could potentially exploit this flaw to obtain unauthorized access if the product is exposed to the Internet or an untrusted network.