A Server‑Side Request Forgery flaw exists in Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16. A high‑privileged attacker with remote access could instruct the server to make arbitrary requests, potentially exposing sensitive data or enabling further internal reconnaissance. The weakness corresponds to CWE‑918.

Dell Secure Connect Gateway (SCG) Policy Manager with software versions before 5.34.00.16 are affected. Only the Policy Manager component is vulnerable; later releases include the fix.

The CVSS score of 5.8 indicates a moderate severity. The EPSS score is not available, so the likelihood of exploitation cannot be quantified from the data. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires remote access with high privileges, which may be achieved through existing administrative or compromised accounts. In the absence of additional controls, the risk of information disclosure remains tangible.