Lucene search

[email protected]NVD:CVE-2022-46754

HistoryFeb 11, 2023 - 1:23 a.m.

CVE-2022-46754

2023-02-1101:23:25

CWE-284

[email protected]

web.nvd.nist.gov

wyse management suite

access control

vulnerability

unauthorized access

pro license features

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

29.1%

JSON

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access certain pro license features for which this admin is not authorized in order to configure user controlled external entities.

Affected configurations

Nvd

Node

dellwyse_management_suiteRange≤3.8.0

VendorProductVersionCPE
dellwyse_management_suite*cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	wyse_management_suite	*	cpe:2.3:a:dell:wyse_management_suite::::::::

References

www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

29.1%

JSON

Related for NVD:CVE-2022-46754

cvelist1 prion1 cve1 nessus1