2476 matches found
Design/Logic Flaw
A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...
CVE-2014-9614
The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/...
CVE-2014-9614
CVE-2014-9614 (Netsweeper) affects the Web Panel prior to version 4.0.5, where the branding account uses a default password of 'branding'. This allows remote attackers to access the system by targeting the webadmin/ interface. The NUCLEI template confirms the issue and describes impact as unautho...
CVE-2014-0234
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...
Design/Logic Flaw
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...
PT-2020-7594 · Red Hat · Openshift
The default configuration of broker.conf in Red Hat OpenShift Enterprise 2.x before 2.1 has a password of "mooo" for a Mongo account, which allows remote attackers to hijack the broker by providing this password, related to the openshift.sh script in Openshift Extras before 20130920. NOTE: this m...
Default credentials
An issue was discovered in Polycom Web Management Interface G3/HDX 8000 HD with Durango 2.6.0 4740 software and embedded Polycom Linux Development Platform 2.14.g3. It has a blank administrative password by default, and can be successfully used without setting this password...
CVE-2012-6611
Polycom Web Management Interface G3/HDX 8000 HD running Durango 2.6.0 4740 and embedded Polycom Linux Development Platform 2.14.g3 is affected. The issue is a default, blank administrative password that allows access without credential setup. CVSS metrics indicate network access, no user interact...
The vulnerability of the FortiOS operating system, related to deficiencies in access control, allows attackers to obtain secret keys embedded in the system or certificates uploaded by users.
The vulnerability of the FortiOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to obtain secret keys that are built into the system or certificates uploaded by users. This can occur either through resetting the encryption keys’...
CVE-2019-7488
Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance version 10.0.2 and earlier...
CVE-2019-7488
SonicWall Email Security Appliance (affected up to version 10.0.2 and earlier) is vulnerable to CVE-2019-7488 due to a weak/default credential/credentials issue, allowing an attacker to gain access to the appliance database. Multiple connected sources (Red Hat advisory, CNVD entry, NVD record, an...
CVE-2014-0175
mcollective has a default password set at install...
CVE-2014-0175
mcollective has a default password set at install...
DEBIAN-CVE-2014-0175
mcollective has a default password set at install...
CVE-2014-0175
mcollective has a default password set at install...
Default credentials
mcollective has a default password set at install...
CVE-2014-0175
mcollective has a default password set at install...
CVE-2014-0175
mcollective has a default password set at install...
CVE-2014-0175
CVE-2014-0175 relates to mcollective with a default password set at installation. Connected sources corroborate an unpatched/default-credential condition affecting mcollective; CVSS metrics indicate high risk (Network, low attack complexity, no authentication required, partial confidentiality/int...
PT-2019-7040 · Puppet +1 · Mcollective +1
Name of the Vulnerable Software and Affected Versions: mcollective affected versions not specified Description: The issue is related to a default password being set during installation. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...