Lucene search
HistoryAug 10, 2022 - 5:15 p.m.
CVE-2022-33927
dell wyse management suite
session fixation
vulnerability
unauthenticated attacker
user session hijack
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
33.2%
Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a user with multiple active sessions in order to hijack a user’s session.
Affected configurations
Node
dellwyse_management_suiteRange<3.8.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | wyse_management_suite | * | cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-33927
2022-08-10 17:15:08
cnvd
cnvd
Wyse Management Suite has an unspecified vulnerability (CNVD-2022-56659)
2022-08-11 00:00:00
cvelist
cvelist
CVE-2022-33927
2022-08-10 16:30:57
prion
prion
Session fixation
2022-08-10 17:15:00
nessus
nessus
Dell Wyse Management Suite < 3.8 Multiple Vulnerabilities (DSA-2022-134)
2022-07-19 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
33.2%
Related for NVD:CVE-2022-33927