CVE-2022-46675 Information disclosure in Wyse Management Suite
Unauthenticated attackers can discover internal application structure in Wyse Management Suite, aiding further vulnerability research.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-46675?
CVE-2022-46675 is a medium-severity vulnerability in Dell Wyse Management Suite, published on 10 Feb 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. A unauthenticated attacker could potentially discover the internal structure of the application and its components and use this information for further vulnerability research.
Weakness: CWE-209
Which versions are affected by CVE-2022-46675?
It affects 1 product.
Products include Dell Wyse Management Suite.
How do I fix CVE-2022-46675?
No fix has been published for CVE-2022-46675 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-46675 being exploited?
There is no known exploitation of CVE-2022-46675 in the wild and no public exploit code.
Other vulnerabilities in Dell Wyse Management Suite
Sources
Also known as GHSA-cfqm-rcfx-9r9w.