Cleartext Password Storage Vulnerability in Dell KACE Deployment Appliance

CVE-2011-4046

Summary

The Dell KACE K2000 System Deployment Appliance contains a security flaw where the recovery account password is stored in cleartext within a PHP script. This design vulnerability permits context-dependent attackers to access the source code of the script, leading to the potential exposure of sensitive information. Proper mitigation strategies must be employed to prevent unauthorized access to critical data stored in such an insecure manner.

References