medium6.5

CVE-2022-34431

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability.

Impact

Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability. A WMS privilege attacker could potentially exploit this vulnerability, leading to DHC system not being accessible.

Affected products

Vendor	Product	Affected versions
Dell	Hybrid Client	from 1.5 before 1.8

Weakness classification

CWE-284

References

NVD record
CVE.org record
https://www.dell.com/support/kbdoc/en-us/000203345/dsa-2022-260-dell-hybrid-client-security-update-for-multiple-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000203345/dsa-2022-260-dell-hybrid-client-security-update-for-multiple-vulnerabilities