PT-2005-5257 · Spb · Spb Kiosk Engine

Publicado 2005-12-30 · Atualizado 2018-10-19 · CVE-2005-4589

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Spb Kiosk Engine version 1.0.0.1

Description The issue allows local users to obtain the administrator's passcode because it is stored in the registry in plaintext.

Recommendations For Spb Kiosk Engine version 1.0.0.1, consider changing the storage mechanism of the administrator's passcode to a more secure method, such as encryption, to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-2005-4589

Produtos afetados

Spb Kiosk Engine

Referências · 7

• http://airscanner.com/security/05083101_kioskpass.htm · Aviso do Fabricante
• http://securityfocus.com/archive/1/420258/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4589 · Nota de Segurança
• http://secunia.com/advisories/18243 · Aviso do Fabricante
• http://osvdb.org/22033 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23894 · Nota
• http://securitytracker.com/id?1015413 · Nota