The vulnerability in Dell Secure Connect Gateway Policy Manager permits improper certificate validation, allowing an attacker to bypass authentication checks and potentially manipulate or read confidential data. Based on the CWE-295 type flaw, the primary impact is information disclosure, information tampering, and integrity compromise, rather than code execution or denial of service.

The affected system is Dell Secure Connect Gateway (SCG) Policy Manager. Versions prior to 5.34.00.16 and prior to 5.36 are vulnerable. Users running these releases should verify the installed version against the vendor's update guide.

The CVSS score of 6.4 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. An attacker with adjacent network access and no authentication can exploit the flaw to read or alter data. The risk is heightened for environments where the SCG Policy Manager is exposed to untrusted networks or lacks proper segmentation.