{"api_version":"1","generated_at":"2026-07-23T14:28:52+00:00","cve":"CVE-2020-29498","urls":{"html":"https://cve.report/CVE-2020-29498","api":"https://cve.report/api/cve/CVE-2020-29498.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-29498","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-29498"},"summary":{"title":"CVE-2020-29498","description":"Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.","state":"PUBLIC","assigner":"secure@dell.com","published_at":"2021-01-04 22:15:00","updated_at":"2021-01-06 21:22:00"},"problem_types":["CWE-601"],"metrics":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282","name":"https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282","refsource":"MISC","tags":["Vendor Advisory"],"title":"DSA-2020-282: Dell Wyse Management Suite Security Update for Multiple Vulnerabilities | Dell US","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-29498","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-29498","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"29498","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dell","cpe5":"wyse_management_suite","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"29498","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"dell","cpe5":"wyse_management_suite","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"secure@dell.com","DATE_PUBLIC":"2020-12-18","ID":"CVE-2020-29498","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Wyse Management Suite","version":{"version_data":[{"version_affected":"<","version_value":"3.1"}]}}]},"vendor_name":"Dell"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites."}]},"impact":{"cvss":{"baseScore":6.1,"baseSeverity":"Medium","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-601: URL Redirection to Untrusted Site ('Open Redirect')"}]}]},"references":{"reference_data":[{"refsource":"MISC","url":"https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282","name":"https://www.dell.com/support/kbdoc/en-us/000180983/dsa-2020-282"}]}},"nvd":{"publishedDate":"2021-01-04 22:15:00","lastModifiedDate":"2021-01-06 21:22:00","problem_types":["CWE-601"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"severity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*","versionEndExcluding":"3.1","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"29498","Ordinal":"192674","Title":"CVE-2020-29498","CVE":"CVE-2020-29498","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"29498","Ordinal":"1","NoteData":"Dell Wyse Management Suite versions prior to 3.1 contain an open redirect vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to redirect application users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links. The vulnerability could be used to conduct phishing attacks that cause users to unknowingly visit malicious sites.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"29498","Ordinal":"2","NoteData":"2021-01-04","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"29498","Ordinal":"3","NoteData":"2021-01-04","Type":"Other","Title":"Modified"}]}}}