Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-2049
esesix
thintune
thin clients
firmware vulnerability
cleartext storage
security vulnerability
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.3%
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.
Affected configurations
Node
esesixthintune_extremeMatch2.4.38
OResesixthintune_lMatch2.4.38
OResesixthintune_mMatch2.4.38
OResesixthintune_mobileMatch2.4.38
OResesixthintune_sMatch2.4.38
OResesixthintune_xmMatch2.4.38
OResesixthintune_xsMatch2.4.38
Related
nvd
nvd
CVE-2004-2049
2004-12-31 05:00:00
cvelist
cvelist
CVE-2004-2049
2005-05-10 04:00:00
openvas
openvas
eSeSIX Thintune Thin Client Multiple Vulnerabilities
2005-11-03 00:00:00
eSeSIX Thintune Thin Client Multiple Vulnerabilities
2005-11-03 00:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
25.3%
Related for CVE-2004-2049