medium4.9

CVE-2022-46678

Wyse Management Suite 3.8 and below contain an improper access control vulnerability.

Impact

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized.

Affected products

Vendor	Product	Affected versions
Dell	Wyse Management Suite	through 3.8.0

Weakness classification

CWE-284

References

NVD record
CVE.org record
https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities