Lucene search

K
cveMitreCVE-2004-2049
HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-2049

2005-05-1004:00:00
mitre
web.nvd.nist.gov
23
esesix
thintune
thin clients
firmware vulnerability
cleartext storage
security vulnerability

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

25.1%

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.

Affected configurations

Nvd
Node
esesixthintune_extremeMatch2.4.38
OR
esesixthintune_lMatch2.4.38
OR
esesixthintune_mMatch2.4.38
OR
esesixthintune_mobileMatch2.4.38
OR
esesixthintune_sMatch2.4.38
OR
esesixthintune_xmMatch2.4.38
OR
esesixthintune_xsMatch2.4.38
VendorProductVersionCPE
esesixthintune_extreme2.4.38cpe:2.3:h:esesix:thintune_extreme:2.4.38:*:*:*:*:*:*:*
esesixthintune_l2.4.38cpe:2.3:h:esesix:thintune_l:2.4.38:*:*:*:*:*:*:*
esesixthintune_m2.4.38cpe:2.3:h:esesix:thintune_m:2.4.38:*:*:*:*:*:*:*
esesixthintune_mobile2.4.38cpe:2.3:h:esesix:thintune_mobile:2.4.38:*:*:*:*:*:*:*
esesixthintune_s2.4.38cpe:2.3:h:esesix:thintune_s:2.4.38:*:*:*:*:*:*:*
esesixthintune_xm2.4.38cpe:2.3:h:esesix:thintune_xm:2.4.38:*:*:*:*:*:*:*
esesixthintune_xs2.4.38cpe:2.3:h:esesix:thintune_xs:2.4.38:*:*:*:*:*:*:*

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

25.1%

Related for CVE-2004-2049