Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-46678: Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized. ...

CVE-2022-46678 · published 3 years ago

Summary

Wyse Management Suite

3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
dell	wyse_management_suite	<= 3.8.0 `cpe:2.3:a:dell:wyse_management_suite::::::::`

Original advisory text

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized. ...

Wyse Management Suite

3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized.

References

https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-manage... Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

4.9 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-284Improper Access Control

Timeline

Published11 Feb 2023

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2022-46678 · NVD

Track software like this

Free during beta