Executive Summary

Informations
Name CVE-2012-4933 First vendor Publication 2012-10-20
Vendor Cve Last vendor Modification 2024-11-21

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:N/A:N)
Cvss Base Score 7.8 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) GetFile_Password and (2) GetConfigInfo_Password operations, which allows remote attackers to obtain sensitive information via a crafted rtrlet/rtr request for the HandleMaintenanceCalls function.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4933

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-255 Credentials Management

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

OpenVAS Exploits

Date Description
2012-10-26 Name : Novell ZENWorks Asset Management Information Disclosure Vulnerabilities
File : nvt/secpod_novell_zenworks_asset_mangment_info_disc_vuln.nasl

Snort® IPS/IDS

Date Description
2014-01-10 Novell ZENworks Asset Management default admin credentials function call attempt
RuleID : 24436 - Revision : 8 - Type : SERVER-WEBAPP
2014-01-10 Novell ZENworks Asset Management default admin credentials function call attempt
RuleID : 24435 - Revision : 8 - Type : SERVER-WEBAPP

Metasploit Database

id Description
2020-05-23 Novell ZENworks Asset Management 7.5 Remote File Access
2020-05-23 Novell ZENworks Asset Management 7.5 Configuration Access

Nessus® Vulnerability Scanner

Date Description
2012-10-25 Name : The remote host has an arbitrary information disclosure vulnerability.
File : novell_zenworks_asset_management_arbitrary_information_disclosure.nasl - Type : ACT_ATTACK

Sources (Detail)

http://www.kb.cert.org/vuls/id/332412
http://www.securitytracker.com/id?1027682
https://community.rapid7.com/community/metasploit/blog/2012/10/15/cve-2012-49...
https://exchange.xforce.ibmcloud.com/vulnerabilities/79252
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
Date Informations
2024-11-28 22:59:17
  • Multiple Updates
2024-11-28 12:31:45
  • Multiple Updates
2021-05-04 12:21:46
  • Multiple Updates
2021-04-22 01:25:55
  • Multiple Updates
2020-05-23 13:17:00
  • Multiple Updates
2020-05-23 00:34:49
  • Multiple Updates
2017-08-29 09:24:03
  • Multiple Updates
2014-02-17 11:13:42
  • Multiple Updates
2014-01-19 21:28:54
  • Multiple Updates
2013-05-10 22:47:04
  • Multiple Updates
2013-02-14 13:24:58
  • Multiple Updates
2013-01-19 13:20:50
  • Multiple Updates
2012-11-16 13:23:05
  • Multiple Updates