Description
The Dell KACE K2000 Systems Deployment Appliance 3.3.36822 and earlier contains a peinst CIFS share, which allows remote attackers to obtain sensitive information by reading the (1) unattend.xml or (2) sysprep.inf file, as demonstrated by reading a password.
References
- 47172 vdb-entry
- VU#598700 third-party-advisory
- ADV-2011-0883 vdb-entry
- dell-kacek2000-peinst-info-disclosure(66630) vdb-entry
- http://www.kace.com/support/kb/index.php?action=artikel&cat=1&id=1104