Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16 contain a Server‑Side Request Forgery flaw that can expose sensitive data, bypass protection mechanisms, and grant unauthorized access. The vulnerability arises when an attacker can direct the server to request arbitrary URLs, potentially accessing internal resources or data not intended for external exposure.

All installations of Dell Secure Connect Gateway Policy Manager before version 5.34.00.16 are affected. The affected product is Dell’s Secure Connect Gateway Policy Manager, which manages firewall and routing policies for secure connectivity.

The CVSS score of 7.7 classifies the issue as high severity. It is not listed in CISA’s KEV catalog and the EPSS score is not available, indicating limited public data on exploitation likelihood. Attacks would require a high‑privileged attacker with remote access; such an attacker could send requests that trigger the SSRF path, potentially exposing sensitive information or allowing unauthorized access. The extent to which internal resources could be reached depends on the gateway’s outbound network capabilities, which are not specified in the CVE description.