Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent attackers to obtain sensitive information by examining script source code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dell KACE K2000 跨站脚本攻击漏洞
Vulnerability Description
Dell KACE K2000 System Deployment Appliance中存在一些漏洞。恶意人员可利用这些漏洞绕过某些安全限制并执行跨站脚本攻击。该漏洞包括： 1）设备包含隐含的恢复账户并且能够获取web管理级的访问。 2）该漏洞源于某些未明输入在返回给用户前没有经过正确的过滤，攻击者可利用该漏洞在受影响站点上下文中的受信任用户浏览器上执行任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A