The SCG Policy Manager software contains an Incorrect Permission Assignment for Critical Resource flaw. An attacker with local, low‑privileged access can exploit this weakness to bypass protection mechanisms, read restricted configuration or data, and gain unauthorized access to system resources, potentially exposing confidential information.

The vulnerability affects Dell Secure Connect Gateway Policy Manager versions before 5.34.00.16 on all platforms that host the SCG Policy Manager component.

The vulnerability has a CVSS score of 6.3 and is not listed in the CISA KEV catalog. EPSS data is unavailable, but the lack of remote attack indicators means a local low‑privileged attacker must physically or otherwise gain local access to exploit this flaw. Given the moderate severity and local nature of the attack vector, the risk is considered moderate but significant for environments where local users have elevated privileges or where the SCG Policy Manager handles highly sensitive data.