medium4.9

CVE-2022-46676

Wyse Management Suite 3.8 and below contain an improper access control vulnerability.

Impact

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disable or delete users under administration and unassigned admins for which the group admin is not authorized.

Affected products

Vendor	Product	Affected versions
Dell	Wyse Management Suite	through 3.8.0

Weakness classification

CWE-284

References

NVD record
CVE.org record
https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities