{"id":"CVE-2022-33931","aliases":["EUVD-2022-36967","GHSA-3jvf-6wvh-pm32"],"status":"published","title":"Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in...","description":"Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no access to Alert Classification page could potentially exploit this vulnerability, leading to the change the alert categories.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00435,"percentile":0.38068,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2022-08-10T16:31:39Z","modified":"2026-06-17T04:49:30Z","products":[{"vendor":"dell","product":"wyse management suite"},{"vendor":"dell","product":"wyse_management_suite"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000201383/dsa-2022-134-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33931"},{"url":"https://github.com/advisories/GHSA-3jvf-6wvh-pm32"}],"sources":{"cve":[{"id":"CVE-2022-33931","description":"Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no access to Alert Classification page could potentially exploit this vulnerability, leading to the change the alert categories.","status":"published","published":"2022-08-10T16:31:39.58Z","modified":"2024-09-16T22:29:38.782Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-36967","description":"Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no access to Alert Classification page could potentially exploit this vulnerability, leading to the change the alert categories.","status":"published","published":"2022-08-10T16:31:39Z","modified":"2024-09-16T22:29:38Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:55:02.946444Z"}],"ghsa":[{"id":"GHSA-3jvf-6wvh-pm32","title":"Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in...","description":"Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no access to Alert Classification page could potentially exploit this vulnerability, leading to the change the alert categories.","status":"published","published":"2022-08-11T00:00:32Z","modified":"2023-02-02T05:02:38Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T14:51:29.373702Z"}],"nvd":[{"id":"CVE-2022-33931","description":"Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. An attacker with no access to Alert Classification page could potentially exploit this vulnerability, leading to the change the alert categories.","status":"published","published":"2022-08-10T17:15:09.167Z","modified":"2026-06-17T04:49:30.653Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:07:24.750124Z"}]}}