CVE-2022-29090

Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform unauthorized actions.

Score

CVSS 3.1 8.5 High

Status

Modified - security_alert@emc.com

Published

2022-08-10

Last modified

2024-09-17

Weaknesses

CWE-312, CWE-317

Affected products

• Wyse Management Suite (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple…