Lucene search

K
cvelistCertccCVELIST:CVE-2012-4933
HistoryOct 20, 2012 - 6:00 p.m.

CVE-2012-4933

2012-10-2018:00:00
certcc
www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.971 High

EPSS

Percentile

99.8%

The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) GetFile_Password and (2) GetConfigInfo_Password operations, which allows remote attackers to obtain sensitive information via a crafted rtrlet/rtr request for the HandleMaintenanceCalls function.

6.3 Medium

AI Score

Confidence

Low

0.971 High

EPSS

Percentile

99.8%