CVE-2022-34365

CWE-22 — Path Traversal3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.5%
top 34.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Wyse Management Suite
Timeline
PublishedAug 10
Latest updateAug 11

Description

WMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5dell/wyse_management_suiteunspecified — 3.8

🔴Vulnerability Details

2
GHSA
GHSA-rhv9-xhjc-3chf: WMS 3↗2022-08-11
▶
CVEList
CVE-2022-34365: WMS 3↗2022-08-10
▶
CVE-2022-34365 (MEDIUM CVSS 6.5) | WMS 3.7 contains a Path Traversal V | cvebase.io