Lucene search

DellCVE-2023-32483

HistoryJul 20, 2023 - 12:15 p.m.

CVE-2023-32483

2023-07-2012:15:11

CWE-312

dell

web.nvd.nist.gov

151

wyse management suite

cve-2023-32483

sensitive information disclosure

vulnerability

log files

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Wyse Management Suite versions prior to 4.0 contain a sensitive information disclosure vulnerability. An authenticated malicious user having local access to the system running the application could exploit this vulnerability to read sensitive information written to log files.

Affected configurations

Nvd

Node

dellwyse_management_suiteRange<4.0

VendorProductVersionCPE
dellwyse_management_suite*cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	wyse_management_suite	*	cpe:2.3:a:dell:wyse_management_suite::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Wyse Management Suite",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "4.0 and below"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000215351/dsa-2023-240-dell-wyse-management-suite

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-32483