CVE-2021-21587 Information disclosure in Wyse Management Suite
A local unauthenticated attacker can obtain file and folder paths in Dell Wyse Management Suite, leading to information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21587?
CVE-2021-21587 is a medium-severity vulnerability in Dell Wyse Management Suite, published on 15 Jul 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dell Wyse Management Suite versions 3.2 and earlier contain a full path disclosure vulnerability. A local unauthenticated attacker could exploit this vulnerability in order to obtain the path of files and folders.
Weakness: CWE-200
Which versions are affected by CVE-2021-21587?
It affects 1 product.
Products include Dell Wyse Management Suite.
How do I fix CVE-2021-21587?
No fix has been published for CVE-2021-21587 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-21587 being exploited?
There is no known exploitation of CVE-2021-21587 in the wild and no public exploit code.
Other vulnerabilities in Dell Wyse Management Suite
Sources
Also known as GHSA-9ww5-fqmw-qv7w.