Lucene search

K
cve[email protected]CVE-2011-4048
HistoryNov 12, 2011 - 12:55 a.m.

CVE-2011-4048

2011-11-1200:55:01
CWE-255
web.nvd.nist.gov
19
dell
kace
k2000
system deployment appliance
default credentials
remote attackers
sensitive information

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials.

Affected configurations

NVD
Node
dellkace_k2000_systems_deployment_appliance

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

Related for CVE-2011-4048