CVE-2022-29097 — Dell / Wyse Management Suite

CVE-2022-29097

Dell / Wyse Management Suite PUBLISHED

Description (CNA)

Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.

Affected (CNA)

Vendor / product	Versions
Dell / Wyse Management Suite	affected unspecified before 3.6.1

CWE

CWE-23

References

https://www.dell.com/support/kbdoc/en-us/000200215/dsa-2022-143-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000200215/dsa-2022-143-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities