Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.5",
  "pubDate": "2026-09-07T15:17:32.277Z",
  "pubdate": "2026-09-07T15:17:32.277Z",
  "executiveSummary": "This vulnerability involves an Insertion of Sensitive Information into Log File flaw identified within Dell SCG 5.0 Appliance and Application versions.\nThe vulnerability occurs when sensitive data, such as credentials or protected system information, is improperly recorded in system log files in plaintext or insufficient masking formats.\nAffected systems include Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00.\nThe risk implication is unauthorized information exposure, potentially allowing a local attacker to harvest sensitive credentials or configuration details.\nExploitation requires a low-privileged attacker to possess local access to the appliance or application environment, enabling them to read log files that store the inadvertently cached sensitive data.\nSuccessful exploitation could facilitate privilege escalation or further compromise of the Dell SCG environment.",
  "technicalDetails": "The vulnerability is categorized as an Insertion of Sensitive Information into Log File issue, arising from improper sanitization or handling of sensitive data streams before they are persisted to local log files.\nThe root cause lies in the application's logging logic, which fails to scrub or redact sensitive metadata, tokens, or credentials during routine diagnostic or transactional logging operations.\nAn attacker with low-privileged local access can leverage this exposure by directly accessing log directories where the system writes its operational output. By querying these files, an attacker can extract plaintext data that should remain confidential.\nAttack flow begins with the attacker establishing a local session on the host system. Once authenticated with low-level privileges, the attacker targets specific log files or directories designated for SCG application logging. By performing search operations (such as grep or cat) on these files, the attacker can systematically identify and harvest credentials or sensitive state information leaked during previous application runtime cycles.\nThe vulnerability affects Dell SCG 5.0 Appliance (versions < 5.36.00.16) and Dell SCG 5.0 Application (versions < 5.36.00.00).\nPost-exploitation impact includes unauthorized disclosure of authentication tokens, API keys, or infrastructure configuration details, which an adversary could use to maintain persistence or escalate privileges within the Dell SCG ecosystem.\nThis vulnerability is particularly dangerous as log files are often stored with broad read permissions, facilitating access for lower-privileged users who have legitimate local system access. There is no requirement for network-level exploitation, as the primary vector remains the local system's filesystem."
}