First published: Fri Feb 10 2023(Updated: )
Wyse Management Suite 3.8 and below contain an improper access control vulnerability with which an custom group admin can create a subgroup under a group for which the admin is not authorized.
Credit: security_alert@emc.com
Affected Software | Affected Version | How to fix |
---|---|---|
Dell Wyse Management Suite | <=3.8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-46677 is an improper access control vulnerability in Wyse Management Suite 3.8 and below.
CVE-2022-46677 allows a custom group admin to create a subgroup under a group for which the admin is not authorized.
CVE-2022-46677 has a severity level of medium with a CVSS score of 4.9.
To fix CVE-2022-46677, Dell Wyse Management Suite users should apply the security update mentioned in the reference link.