Tecknodreams SapphireIMS Trust Management Issue Vulnerability

Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise-class service management system from Tecknodreams India.A trust management issue vulnerability exists in SapphireIMS 5.0, which stems from the fact that in SapphireIMS 5.0, it is possible to use hard-coded credentials in the client (username. sapphire, password: ims) and gain access to the portal. Once access is available, an attacker can use the vulnerability to inject malicious OS commands on the “ping”, “traceroute” and “snmp” functions and execute code on the server to execute code.