CVE-2012-4933

CVE-2012-4933 is a critical vulnerability affecting Novell ZENworks Asset Management (ZAM) 7.5. It involves the rtrlet web application in the Web Console, which uses hard-coded credentials ("Ivanhoe" and "Scott") for specific operations like GetFile_Password and GetConfigInfo_Password. This allows unauthenticated remote attackers to obtain sensitive configuration information by crafting a malicious rtrlet/rtr request to the HandleMaintenanceCalls function. The vulnerability has a CVSS score of 7.8, indicating high severity due to its network-based attack vector, low attack complexity, and complete confidentiality impact without requiring authentication. Its EPSS score of 0.7702 and FAUCET Risk Score of 99/100 further highlight its significant risk. While not listed on the KEV catalog or Hot List, exploit intelligence shows that Metasploit modules exist for remote file and configuration access, indicating readily available exploit code. Despite this, there is no recorded community discussion or media coverage, which is typical for a large percentage of CVEs.