Vulnerability Details CVE-2022-33927
Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a user with multiple active sessions in order to hijack a user's session.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 59.6%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2022-33927
-
cpe:2.3:a:dell:wyse_management_suite:-
-
cpe:2.3:a:dell:wyse_management_suite:1.0
-
cpe:2.3:a:dell:wyse_management_suite:1.1
-
cpe:2.3:a:dell:wyse_management_suite:1.2
-
cpe:2.3:a:dell:wyse_management_suite:1.3
-
cpe:2.3:a:dell:wyse_management_suite:1.4
-
cpe:2.3:a:dell:wyse_management_suite:1.4.1
-
cpe:2.3:a:dell:wyse_management_suite:2.0
-
cpe:2.3:a:dell:wyse_management_suite:3.0
-
cpe:2.3:a:dell:wyse_management_suite:3.1
-
cpe:2.3:a:dell:wyse_management_suite:3.2
-
cpe:2.3:a:dell:wyse_management_suite:3.3.1
-
cpe:2.3:a:dell:wyse_management_suite:3.5.1
-
cpe:2.3:a:dell:wyse_management_suite:3.5.2
-
cpe:2.3:a:dell:wyse_management_suite:3.6.0
-
cpe:2.3:a:dell:wyse_management_suite:3.6.1
-
cpe:2.3:a:dell:wyse_management_suite:3.7.0