Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
eSeSIX Thintune瘦客户端设备多个安全漏洞
Vulnerability Description
eSeSIX Thintune是一系列eSeSIX GmbH开发的瘦客户端应用程序。在定制Linux平台上支持ICA、RDP、X11和SSH支持。 eSeSIX Thintune存在多个安全问题,远程攻击者可以利用这个漏洞完全控制设备。 第一个问题是存在后门 攻击者可以连接没有公开的TCP/25072端口,在提供密码("jstwo")后就可以控制设备,攻击者可以利用此漏洞获得设备全部权限。 第二个问题是存在密码泄露问题 Keeper库用于存储所有JStream配置设置,配置文件存放在/root/.keep
CVSS Information
N/A
Vulnerability Type
N/A