CVE-2022-46754 - Wyse Management Suite 3.8 and below contain an improper access control vulnerability

Back Back to CVE browser

HIGH

Wyse Management Suite 3.8 and below contain an improper access control vulnerability

Published Feb 10, 2023

8.7

HIGH

CVSS 3.1

EPSS 0.51%

Description

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access certain pro license features for which this admin is not authorized in order to configure user controlled external entities.

Affected products

Vendor Dell Product Wyse Management Suite Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.8

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Wyse Management Suite

unaffected

Version	Status	Constraints
0	affected	<=3.8

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49537
Advisory
https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49537		Advisory
https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities		vendor-advisoryVendor Advisory