PT-2023-23800 · Dell · Dell Wyse Thinos
CVE-2023-32455
·
Published
2023-07-20
·
Updated
2023-07-28
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Dell Wyse ThinOS versions prior to 2208 (9.3.2102)
Description
The issue allows an unauthenticated malicious user with local access to the device to read sensitive information written to the log files.
Recommendations
For Dell Wyse ThinOS versions prior to 2208 (9.3.2102), update to version 2208 (9.3.2102) or later to resolve the issue.
Fix
Cleartext Storage of Sensitive Information
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Dell Wyse Thinos