A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to the appliance could read and modify a limited set of setup records, including a contact name and email address captured during initial configuration.
Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Call or email us to get started.