Information Disclosure in Wyse Management Suite by Dell
CVE-2022-46675

5.3MEDIUM

Key Information:

Vendor

Dell
Status
Wyse Management Suite
Vendor
CVE Published:
11 February 2023

What is CVE-2022-46675?

Wyse Management Suite versions 3.8 and earlier are susceptible to an information disclosure vulnerability. This flaw allows unauthenticated attackers to potentially reveal the internal architecture and components of the application. The exposed information could be leveraged for further exploitation and research into additional vulnerabilities. Organizations utilizing affected versions should prioritize updating their installations to mitigate possible security risks.

Affected Version(s)

Wyse Management Suite 0 <= 3.8

References

https://www.dell.com/support/kbdoc/en-us/000206134/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.