PT-2022-15885 · Dell · Wyse Device Agent

Published 2022-04-01 · Updated 2022-04-08 · CVE-2022-23157

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Wyse Device Agent versions 14.6.1.4 and below

Description The issue allows an authenticated malicious user to potentially exploit it and view sensitive information from the WMS Server. This is a sensitive data exposure issue.

Recommendations For Wyse Device Agent versions 14.6.1.4 and below, update to a version above 14.6.1.4 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-23157

Affected Products

Wyse Device Agent

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-23157 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23157 · Vendor Advisory
• https://dell.com/support/kbdoc/000196005 · Vendor Advisory
• https://t.me/cibsecurity/40018 · Telegram Post
• https://t.me/cvenotify/28307 · Telegram Post