{"id":"CVE-2022-29090","state":"PUBLISHED","title":"Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order t","description":"Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform unauthorized actions.","publishedAt":"2022-08-10T16:30:27.158Z","updatedAt":"2024-09-17T02:37:35.608Z","severity":{"score":8.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","source":"dell"},"assigner":"dell","products":["Dell Wyse Management Suite"],"affected":[{"vendor":"Dell","product":"Wyse Management Suite","versions":[{"version":"unspecified","status":"affected","lessThan":"3.7","versionType":"custom"}]}],"references":["https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities"],"weaknesses":["CWE-317"],"ingestedAt":"2026-10-29T19:49:57.813Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/29xxx/CVE-2022-29090.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-29090","state":"PUBLISHED","datePublished":"2022-08-10T16:30:27.158Z","dateUpdated":"2024-09-17T02:37:35.608Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2022-04-12T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform unauthorized actions."}],"affected":[{"vendor":"Dell","product":"Wyse Management Suite","versions":[{"version":"unspecified","status":"affected","lessThan":"3.7","versionType":"custom"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-317","description":"CWE-317: Cleartext Storage of Sensitive Information in GUI","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","dateUpdated":"2022-08-10T16:30:27.000Z","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe"},"datePublic":"2022-07-18T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@dell.com","DATE_PUBLIC":"2022-07-18","ID":"CVE-2022-29090","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Wyse Management Suite","version":{"version_data":[{"version_affected":"<","version_value":"3.7"}]}}]},"vendor_name":"Dell"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform unauthorized actions."}]},"impact":{"cvss":{"baseScore":8.5,"baseSeverity":"High","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-317: Cleartext Storage of Sensitive Information in GUI"}]}]},"references":{"reference_data":[{"name":"https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities","refsource":"MISC","url":"https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T06:10:59.294Z"}}]}}}