PT-2010-4568 · Devonit · Devonit Thin-Client Management Tool

Kevin Finisterre · Publicado 2010-08-25 · Atualizado 2010-08-26 · CVE-2010-3122

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DevonIT thin-client management tool (affected versions not specified)

Description The issue allows remote attackers to obtain administrative control over client machines by discovering a shared secret used for authentication. This is possible because the secret is transmitted in cleartext, making it easier for attackers to sniff the network and discover the secret value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-3122

Produtos afetados

Devonit Thin-Client Management Tool

Referências · 2

• http://kb.cert.org/vuls/id/278785 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-3122 · Nota de Segurança