Path Traversal Vulnerability in Dell Wyse Management Suite

CVE-2022-29097

Summary

A vulnerability exists in Dell Wyse Management Suite versions 3.6.1 and earlier that allows a remote attacker to exploit path traversal flaws within the Device API. This exploitation can potentially provide unauthorized read access to sensitive files located on the server's filesystem, enabling attackers to access data with the same permissions as the running web application.

References