medium6.5

CVE-2022-34365

WMS 3.7 contains a Path Traversal Vulnerability in Device API.

Impact

WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.

Affected products

Vendor	Product	Affected versions
Dell	Wyse Management Suite	before 3.8.0

Weakness classification

CWE-22

References

NVD record
CVE.org record
https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities