CVE-2022-46676

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disable or delete users under administration and unassigned admins for which the group admin is not authorized.
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*

History

07 Nov 2023, 03:55

Type Values Removed Values Added
Summary Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disable or delete users under administration and unassigned admins for which the group admin is not authorized. Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disable or delete users under administration and unassigned admins for which the group admin is not authorized.

21 Feb 2023, 18:56

Type Values Removed Values Added
CWE NVD-CWE-Other
CPE cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 4.9
First Time Dell wyse Management Suite
Dell
References (MISC) https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities - (MISC) https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities - Vendor Advisory

11 Feb 2023, 01:23

Type Values Removed Values Added
New CVE

Information

Published : 2023-02-11 01:23

Updated : 2023-12-10 14:48


NVD link : CVE-2022-46676

Mitre link : CVE-2022-46676

CVE.ORG link : CVE-2022-46676


JSON object : View

Products Affected

dell

  • wyse_management_suite
CWE
NVD-CWE-Other CWE-284

Improper Access Control