CVE-2020-29491: Dell Wyse Proprietary OS (ThinOS), лоша конфигурация

Описание

Оригинално описание

Dell Wyse ThinOS 8.6 and prior versions contain an insecure default configuration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the sensitive information on the local network, leading to the potential compromise of impacted thin clients.

Засегнати продукти

• Dell Wyse Proprietary OS (ThinOS): unspecified преди 8.6

Вид слабост

• CWE-276 Неправилни права по подразбиране

История

Други уязвимости в Dell Wyse Proprietary OS (ThinOS)

• 5.0CVE-2021-21532
• 10.0CVE-2020-29492

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2020-29491
• https://nvd.nist.gov/vuln/detail/CVE-2020-29491
• https://www.dell.com/support/kbdoc/en-us/000180768/dsa-2020-281