Sensitive Information Disclosure Vulnerability in Dell Wyse ThinOS

CVE-2021-21598

Summary

Dell Wyse ThinOS versions 9.0, 9.1, and 9.1 MR1 are susceptible to a vulnerability that allows an authenticated user with physical access to the device to read sensitive Smartcard data stored in log files. This can potentially lead to the unauthorized disclosure of sensitive information contained within user interactions. It is essential for organizations using these versions of ThinOS to implement protective measures and review their access policies.

References