CVE-2012-4933 — The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) GetFile_Password and (2) GetConfigInfo_Password operations, which allows remote attackers to obtain sensitive information via a crafted rtrlet/rtr request for the HandleMaintenanceCalls function

Back Back to CVE browser

HIGH

The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) GetFile_Password and (2) GetConfigInfo_Password operations, which allows remote attackers to obtain sensitive information via a crafted rtrlet/rtr request for the HandleMaintenanceCalls function

Published Oct 20, 2012

7.8

HIGH

CVSS 2.0

EPSS 44.01%

Description

The rtrlet web application in the Web Console in Novell ZENworks Asset Management (ZAM) 7.5 uses a hard-coded username of Ivanhoe and a hard-coded password of Scott for the (1) GetFile_Password and (2) GetConfigInfo_Password operations, which allows remote attackers to obtain sensitive information via a crafted rtrlet/rtr request for the HandleMaintenanceCalls function.

Affected products

Remediation

No remediation recorded yet.

Metrics

44.01% 0.44012

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.44012

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (19 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	44.01% (0.44012)	98.71th	v5 (v2026.06.15)
Jun 15, 2026	44.01% (0.44012)	98.58th	v5 (v2026.06.15)
Mar 2, 2026	77.02% (0.77020)	98.94th	v4 (v2025.03.14)
Oct 10, 2025	75.71% (0.75707)	98.85th	v4 (v2025.03.14)
Jul 13, 2025	78.44% (0.78445)	98.97th	v4 (v2025.03.14)
Apr 23, 2025	80.66% (0.80660)	99.06th	v4 (v2025.03.14)
Mar 30, 2025	85.21% (0.85209)	99.31th	v4 (v2025.03.14)
Mar 29, 2025	78.13% (0.78128)	98.73th	v4 (v2025.03.14)
Mar 17, 2025	86.15% (0.86151)	99.36th	v4 (v2025.03.14)
Dec 12, 2024	96.73% (0.96734)	99.72th	v3 (v2023.03.01)
Mar 17, 2024	97.11% (0.97115)	99.77th	v3 (v2023.03.01)
Jan 14, 2024	97.19% (0.97190)	99.78th	v3 (v2023.03.01)
Nov 14, 2023	97.30% (0.97296)	99.84th	v3 (v2023.03.01)
Jul 8, 2023	97.26% (0.97259)	99.75th	v3 (v2023.03.01)
May 8, 2023	97.29% (0.97294)	99.76th	v3 (v2023.03.01)
Mar 15, 2023	97.36% (0.97355)	99.79th	v3 (v2023.03.01)
Mar 7, 2023	97.46% (0.97458)	99.91th	v3 (v2023.03.01)
Mar 6, 2023	66.84% (0.66840)	99.07th	v2 (v2022.01.01)
Feb 4, 2022	66.84% (0.66840)	98.84th	v2 (v2022.01.01)

Weaknesses (1)

CWE-255

References (4)

http://www.kb.cert.org/vuls/id/332412
third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.securitytracker.com/id?1027682
vdb-entryx_refsource_SECTRACK
https://community.rapid7.com/community/metasploit/blog/2012/10/15/cve-2012-4933-novell-zenworks
x_refsource_MISCExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/79252
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.kb.cert.org/vuls/id/332412		third-party-advisoryx_refsource_CERT-VNUS Government Resource
http://www.securitytracker.com/id?1027682		vdb-entryx_refsource_SECTRACK
https://community.rapid7.com/community/metasploit/blog/2012/10/15/cve-2012-4933-novell-zenworks		x_refsource_MISCExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/79252		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner certcc

Published Oct 20, 2012

Updated Aug 6, 2024

Reserved Sep 17, 2012

Link CVE-2012-4933

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2012-4933

Red Hat

Severity n/a

Public date n/a

Links CVE-2012-4933