CVE-2023-32482

2023-07-2012:15:11

CWE-285

CWE-863

[email protected]

web.nvd.nist.gov

cve-2023-32482

wyse management suite

authorization vulnerability

privileged access

policy push

nvd

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

4.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.1%

JSON

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group.

Affected configurations

NVD

Node

dellwyse_management_suiteRange<4.0

CPENameOperatorVersion
dell:wyse_management_suitedell wyse management suitelt4.0

CPE	Name	Operator	Version
dell:wyse_management_suite	dell wyse management suite	lt	4.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Wyse Management Suite",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "4.0 and below"
      }
    ]
  }
]