CVE-2011-4046

Currently unrated

Key Information:

Vendor
Dell
Status
Kace K2000 Systems Deployment Appliance
Vendor
CVE Published:
12 November 2011

Summary

The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code.

References

http://www.kb.cert.org/vuls/id/135606
third-party-advisoryx_refsource_CERT-VN
http://www.kace.com/support/kb/index.php?action=artikel&i...
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.