4.4
Medium
CVE-2022-23157 Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability
Description
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A authenticated malicious user could potentially exploit this vulnerability in order to view sensitive information from the WMS Server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Wyse Device Agent 14.6 | earliest → < 14.6.2.13 | 14.6.2.13 |
Other CVEs of Dell Wyse Device Agent
The 4 CVEs of Dell Wyse Device Agent →
CVE-2022-23158
Wyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability
6.0
Medium
CVE-2022-23156
Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability
6.0
Medium
CVE-2021-36341
Dell Wyse Device Agent version 14.5.4.1 and below contain a sensitive data exposure vulnerability
5.5
Medium