Sensitive Information Disclosure in Dell Wyse ThinOS
CVE-2021-21597
7.2HIGH
Summary
Dell Wyse ThinOS version 9.0 is susceptible to a sensitive information disclosure vulnerability. This issue allows an authenticated malicious user with physical access to the system to exploit the vulnerability and potentially access sensitive information contained in the log files. Proper security measures should be established to prevent unauthorized physical access to devices running this version.
Affected Version(s)
Wyse ThinOS 9.0
References
CVSS V3.1
Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved