Default credentials

🗓️ 09 Dec 2020 19:15:00Reported by PRIOn knowledge baseType

Default credentials may lead to unintended resource access through pass through 1.7.3, allowing exploitation via git pull, password decryption, and unauthorized login to a remote service. Attackers can manipulate password files in Git repository to trick users into decrypting and using wrong passwords, potentially controlled by the attacker. Commit signing provides a solution for this threat model

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2020-28086	9 Dec 202022:32	–	circl
CNNVD	Git Authorization Problem Vulnerability	9 Dec 202000:00	–	cnnvd
CVE	CVE-2020-28086	9 Dec 202018:09	–	cve
Cvelist	CVE-2020-28086	9 Dec 202018:09	–	cvelist
Debian CVE	CVE-2020-28086	9 Dec 202018:09	–	debiancve
EUVD	EUVD-2020-20574	7 Oct 202500:30	–	euvd
NVD	CVE-2020-28086	9 Dec 202019:15	–	nvd
OSV	DEBIAN-CVE-2020-28086	9 Dec 202019:15	–	osv
OSV	UBUNTU-CVE-2020-28086	9 Dec 202019:15	–	osv
Tenable Nessus	Photon OS 4.0: Password PHSA-2021-4.0-0115	23 Jul 202400:00	–	nessus