CVEvulnerability

CVE-2004-2049

4.6 MEDIUM Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.

Affected configurations

• esesix thintune extreme 2.4.38 • esesix thintune l 2.4.38 • esesix thintune m 2.4.38 • esesix thintune mobile 2.4.38 • esesix thintune s 2.4.38 • esesix thintune xm 2.4.38 • esesix thintune xs 2.4.38

References