Description
Spb Kiosk Engine 1.0.0.1 stores the administrator's passcode in the registry in plaintext, which allows local users to obtain the passcode.
References
- 1015413 vdb-entry
- 22033 vdb-entry
- spbkioskengine-plaintext-password(23894) vdb-entry
- http://www.airscanner.com/security/05083101_kioskpass.htm
- 18243 third-party-advisory
- 20051224 Airscanner Mobile Security Advisory #0508310 Spb Kiosk Engine Administrator Password & Information Disclosure mailing-list