6.8 CVE-2025-29982

 

Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
https://nvd.nist.gov/vuln/detail/CVE-2025-29982

Categories

CWE-277 : Insecure Inherited Permissions
A product defines a set of insecure permissions that are inherited by objects that are created by the program. Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software. User's umask is used when creating temp files. Insecure umask for core dumps [is the umask preserved or assigned?].

References


 

CPE

cpe start end


REMEDIATION




EXPLOITS


Exploit-db.com

id description date
No known exploits

POC Github

Url
No known exploits

Other Nist (github, ...)

Url
No known exploits


CAPEC


Common Attack Pattern Enumerations and Classifications

id description severity
No entry