CVE-2022-46754CWE-284

Wyse Management Suite 3.8 and below contain an improper access control vulnerability

High · published February 10, 2023

CVSS v3.1
8.7
EPSS
1%
Percentile
42.8
In the wild
Unconfirmed
What it is

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access certain pro license features for which this admin is not authorized in order to configure user controlled external entities.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00512 · 42.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2023-02-10T21:25Z
EPSS history
Timeline
  • 10 FEB 21:25Z
    Wyse Management Suite 3.8 and below contain an improper access control vulnerability
    cvelistv5