Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-33928

Опубликовано: 10 авг. 2022
Источник: nvd
CVSS3: 6.4
CVSS3: 8.8
EPSS Низкий

Описание

Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*
Версия до 3.8.0 (исключая)

EPSS

Процентиль: 27%
0.00098
Низкий

6.4 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-256
CWE-312

Связанные уязвимости

CVSS3: 8.8
github
больше 3 лет назад

Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. An attacker with low privileges could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

EPSS

Процентиль: 27%
0.00098
Низкий

6.4 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-256
CWE-312