CVE-2011-1672 in KACE K2000 Systems Deployment Appliance
Summary
The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
04/09/2011
Disclosure
04/09/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 57050 | Dell KACE K2000 Systems Deployment Appliance information disclosure | 200 | Not defined | Not defined | CVE-2011-1672 |