PT-2021-11680 · Dell · Dell Wyse Management Suite

Khalid Latifi · Published 2021-01-04 · Updated 2021-01-06 · CVE-2020-29498

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Dell Wyse Management Suite versions prior to 3.1

Description: The issue allows a remote unauthenticated attacker to redirect application users to arbitrary web URLs by tricking victims into clicking on maliciously crafted links. This could be used to conduct phishing attacks, causing users to unknowingly visit malicious sites.

Recommendations: For versions prior to 3.1, update to version 3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable links and educating users about the risks of clicking on unsolicited or suspicious links.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2020-29498

Affected Products

Dell Wyse Management Suite

References · 4

• https://dell.com/support/kbdoc/en-us/000180983/dsa-2020-282 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29498 · Security Note
• https://osv.dev/vulnerability/CVE-2020-29498 · Vendor Advisory
• https://t.me/cibsecurity/21559 · Telegram Post