Session Fixation Vulnerability in Dell Wyse Management Suite 3.6.1 and Below

CVE-2022-33927 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A unauthenticated attacker could exploit this by taking advantage of a user with multiple active sessions in order to hijack a user's session.

Learn more about our User Device Pen Test.