Hardcoded credentials

2016-06-2001:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.4%

JSON

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, which allows remote attackers to obtain access via a (1) FTP or (2) SSH connection.

CPENameOperatorVersion
fonalityeq12.8
fonalityeq12.6
fonalityeq14.1.105

Name	Operator	Version
fonality	eq	12.8
fonality	eq	12.6
fonality	eq	14.1.105

References

www.kb.cert.org/vuls/id/754056