CVE-2023-32447

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Dell Wyse ThinOS versions prior to 2306 (9.4.2103) contain a sensitive information disclosure vulnerability. A malicious user with local access to the device could exploit this vulnerability to read sensitive information written to the log files.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Jul 20, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-324485.5PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains License Key Stored in Cleartext vulnerability. A local user with access to the instaCVE-2023-324497.8Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a higCVE-2023-32454.8The Floating Chat Widget WordPress plugin before 3.1.2 does not sanitise and escape some of its settings, which could allow high privilege uCVE-2023-324507.8Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially CVE-2023-324517.8Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during instaCVE-2023-324533.9Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may potentially exploit thiCVE-2023-324547.1DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standaCVE-2023-324555.5Dell Wyse ThinOS versions prior to 2208 (9.3.2102) contain a sensitive information disclosure vulnerability. An unauthenticated malicious usCVE-2023-324578.8Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote attacker with low privileCVE-2023-324587.8Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded SerCVE-2023-32464.3An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 16.4 before 16.4.2, aCVE-2023-324607.8Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially ex
CVE-2023-32447: Medium severity, CVSS 5.5 | Vulnix