CVE-2020-29498CWE-601

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability

Medium · published January 4, 2021

CVSS v3.0
6.1
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.

The record
Technical detail
CVSS v3.0
6.1 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01084 · 65.0th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2021-01-04T21:15Z
EPSS history
Timeline
  • 04 JAN 21:15Z
    Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability
    cvelistv5