Sensitive Information Disclosure in Dell Wyse ThinOS
CVE-2021-21597

7.2HIGH

Key Information:

Vendor
Dell
Vendor
CVE Published:
10 August 2021

Summary

Dell Wyse ThinOS version 9.0 is susceptible to a sensitive information disclosure vulnerability. This issue allows an authenticated malicious user with physical access to the system to exploit the vulnerability and potentially access sensitive information contained in the log files. Proper security measures should be established to prevent unauthorized physical access to devices running this version.

Affected Version(s)

Wyse ThinOS 9.0

References

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.