PT-2005-5257 · Spb · Spb Kiosk Engine

Published 2005-12-30 · Updated 2018-10-19 · CVE-2005-4589

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Spb Kiosk Engine version 1.0.0.1

Description The issue allows local users to obtain the administrator's passcode because it is stored in the registry in plaintext.

Recommendations For Spb Kiosk Engine version 1.0.0.1, consider changing the storage mechanism of the administrator's passcode to a more secure method, such as encryption, to prevent unauthorized access.

Fix

Related Identifiers

CVE-2005-4589

Affected Products

Spb Kiosk Engine

References · 7

• http://airscanner.com/security/05083101_kioskpass.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4589 · Security Note
• http://secunia.com/advisories/18243 · Vendor Advisory
• http://securityfocus.com/archive/1/420258/100/0/threaded · Note
• http://osvdb.org/22033 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23894 · Note
• http://securitytracker.com/id?1015413 · Note