The vulnerability is an insertion of sensitive information into externally-accessible files or directories. It allows a low‑privileged attacker with local access to read or extract confidential data that should be protected, resulting in potential compromise of sensitive information. This weakness is classified as CWE-538. The official description indicates that exposure could occur if an attacker can write or modify files in a directory that is exposed externally. The attack is limited to local reach – a threat actor must be physically or remotely present on the device with low privileges.

Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application versions prior to 5.36.00.00 are affected. Any installations using these earlier releases may expose sensitive data to local attackers.

The CVSS score of 3.3 places the vulnerability in the Low severity range. EPSS data is not available, and the issue is not listed in the CISA KEV catalog, indicating no known widespread exploitation to date. The requirement of local low‑privileged access reduces the attack surface, but the potential for data leakage still warrants attention. Organizations running vulnerable appliances or applications should consider patching or upgrading to mitigate the risk of information disclosure.