CVE-2022-33931

Affected product: Dell Wyse Management Suite versions 3.6.1 and earlier. Vulnerability: Improper Access control in the UI allows an attacker with no access to the Alert Classification page to potentially change alert categories. Root cause / nature: UI access control weakness enabling unauthorize...

CVE-2022-33931

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no access to Alert Classification page could potentially exploit this vulnerability, leading to the change the alert categories...

CVE-2022-33930

Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. An attacker could potentially exploit this vulnerability, leading to the disclosure of certain sensitive information. The attacker may be able to use the exposed information to access and further...

CVE-2022-33930

CVE-2022-33930 affects Dell Wyse Management Suite 3.6.1 and earlier, where Information Disclosure occurs via device error pages. Root cause is information leakage in error pages; impact is disclosure of sensitive data. Remediation per linked advisories is to update to Wyse Management Suite 3.8 or...

CVE-2022-33929

Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary page. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious HTML or JavaScript code in a victim user's web browser in the...

CVE-2022-33929

Dell Wyse Management Suite

CVE-2022-33928

Summary (CVE-2022-33928) Dell Wyse Management Suite (versions 3.6.1 and earlier) contains a plain‑text password storage vulnerability in the UI that could disclose credentials to an attacker with low privileges. Impact is credential exposure and potential access to the vulnerable application with...

CVE-2022-33927

Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a user with multiple active sessions in order to hijack a user's session...

CVE-2022-33927

Dell Wyse Management Suite 3.6.1 and earlier is affected by a Session Fixation vulnerability (CVE-2022-33927). An unauthenticated attacker can hijack a user session by exploiting a user with multiple active sessions. The issue is documented across multiple sources, including Nessus DSA-2022-134, ...

CVE-2022-33926

Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. A remote malicious user could exploit this vulnerability in order to retain access to a file repository after it has been revoked...

CVE-2022-33926

Dell Wyse Management Suite

CVE-2022-33925

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An remote authenticated attacker could potentially exploit this vulnerability by bypassing access controls in order to download reports containing sensitive information...

CVE-2022-33925

Dell Wyse Management Suite is affected by CVE-2022-33925 (UI improper access control). Versions 3.6.1 and earlier allow a remote authenticated attacker to bypass UI access controls and download reports containing sensitive information. The issue stems from insufficient access control in the user ...

CVE-2022-33924

Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to create rules could potentially exploit this vulnerability and create rules...

CVE-2022-33924

CVE-2022-33924 affects Dell Wyse Management Suite

CVE-2022-29090

CVE-2022-29090 affects Dell Wyse Management Suite 3.6.1 and earlier, enabling a low-privileged user to obtain credentials via a sensitive data exposure vulnerability. Connected sources confirm the issue in Wyse Management Suite and note that Dell released fixes (e.g., 3.8+ via DSA-2022-134). Impa...

CVE-2022-29090

Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform...

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, Inc. The product includes centralized Wyse endpoint management, asset tracking, and automated device discovery.Wyse Management Suite 3.6.1 and prior versions contain a security vulnerability that...

Dell Wyse Management Suite 路径遍历漏洞

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes features such as centralized management of Wyse endpoints, asset tracking and automated device discovery. A security vulnerability exists in Wyse Management Suite version...

PT-2022-21918 · Dell · Dell Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions 3.6.1 and below Description: The issue is a Reflected Cross-Site Scripting vulnerability located in the EndUserSummary page. An authenticated attacker could exploit this, leading to the execution of malicio...