CVE-2022-29090
Assigner: dell
Published: 2022-07-18T00:00:00
State: PUBLISHED
affected: product: Wyse Management Suite
vendor: Dell
versions: lessThan: 3.7
status: affected
version: unspecified
versionType: custom
datePublic: 2022-07-18T00:00:00
descriptions: value: Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform unauthorized actions.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.5
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-317
description: CWE-317: Cleartext Storage of Sensitive Information in GUI
type: CWE