Vulnerability in Esesix Thintune Extreme
CVE-2004-2049
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.
EPSS: 0.004 (28.2th percentile) — read the EPSS interpretation.
Affected products
- Esesix Thintune_extreme — versions 2.4.38
- Esesix Thintune_l — versions 2.4.38
- Esesix Thintune_m — versions 2.4.38
- Esesix Thintune_mobile — versions 2.4.38
- Esesix Thintune_s — versions 2.4.38
- Esesix Thintune_xm — versions 2.4.38
- Esesix Thintune_xs — versions 2.4.38
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)