CVE-2022-33928: High severity dell wyse management suite vulnerability
Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-33928?
CVE-2022-33928 is a vulnerability in Dell Wyse Management Suite 3.6.1 and below which allows for the plain-text storage of passwords in the user interface, potentially leading to the disclosure of user credentials.
What is the severity of CVE-2022-33928?
The severity of CVE-2022-33928 is high with a CVSSv3 base score of 8.8.
How does CVE-2022-33928 impact Dell Wyse Management Suite?
CVE-2022-33928 allows an attacker with low privileges to potentially exploit the vulnerability and disclose certain user credentials stored in plain-text in the Dell Wyse Management Suite user interface.
What is the affected version of Dell Wyse Management Suite?
Dell Wyse Management Suite versions 3.6.1 and below are affected by CVE-2022-33928.
How can I mitigate the vulnerability in Dell Wyse Management Suite?
To mitigate the vulnerability in Dell Wyse Management Suite, it is recommended to update to version 3.8.0 or above, as mentioned in the Dell security update.