Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2011-4046

Disclosure Date: November 12, 2011 (last updated October 04, 2023)
The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code.
0
0
Attacker Value
Unknown

CVE-2011-4047

Disclosure Date: November 12, 2011 (last updated October 04, 2023)
The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access.
0
0
Attacker Value
Unknown

CVE-2011-4436

Disclosure Date: November 12, 2011 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface on the Dell KACE K2000 System Deployment Appliance allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2011-4048

Disclosure Date: November 12, 2011 (last updated October 04, 2023)
The Dell KACE K2000 System Deployment Appliance has a default username and password for the read-only reporting account, which makes it easier for remote attackers to obtain sensitive information from the database by leveraging the default credentials.
0
0
Attacker Value
Unknown

CVE-2011-1672

Disclosure Date: April 10, 2011 (last updated October 04, 2023)
The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password.
0
0