CVE-2012-4933

The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of…

published October 20, 2012

CVSS
—
EPSS
44%
Percentile
98.7
In the wild
Unconfirmed
What it is

The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) GetFile_Password and (2) GetConfigInfo_Password operations, which allows remote attackers to obtain sensitive information via a crafted rtrlet/rtr request for the HandleMaintenanceCalls function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.44012 · 98.7th percentile
Published
2012-10-20T18:00Z
EPSS history
Timeline
  • 20 OCT 18:00Z
    The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of…
    cvelistv5