Important: Red Hat Security Advisory: openstack-packstack and openstack-puppet-modules security and bug fix update

Updated openstack-packstack and openstack-puppet-modules packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring...

openstack-puppet-modules: pacemaker configured with default password

It was discovered that the puppet manifests, as provided with the openstack-puppet-modules package, would configure the pcsd daemon with a known default password. If this password was not changed and an attacker was able to gain access to pcsd, they could potentially run shell commands as root...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform Installer update

Updated Red Hat Enterprise Linux OpenStack Platform Installer packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability...

CVE-2015-0529

EMC PowerPath Virtual Appliance (vApp) prior to version 2.0 is vulnerable due to undocumented accounts emcupdate and svcuser protected by default passwords, enabling potential information disclosure via login sessions. Affected product/version: EMC PowerPath Virtual Appliance (vApp) before 2.0. R...

Visualware MyConnection Server Remote Agent Default Password

Binary data visualwaremyconnectionserverremoteagentdefaultpassword.nbin...

Default Password (123456) for 'nexthink' Account

The account 'nexthink' on the remote host has the password '123456'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Nexthink is known to use these credentials to provide administrative access to the host. %NASLMINLEVEL 70300 C Tenable Network...

Default Password Vulnerability in Youyou's Email System of Shenzhen Hechen Communication Technology Co.

Shenzhen Hechen Communication Technology Co., Ltd. Youyou mail system is a modern enterprise to set up a professional e-mail service of a set of overall solutions, the mail system not only provides the conventional e-mail functions, but also extends the e-mail monitoring, e-mail antivirus, e-mail...

Default Password (changeme) for 'splunkadmin' Account

The account 'splunkadmin' on the remote host has the password 'changeme'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Splunk virtual appliances are known to use these credentials to provide administrative access to the host. %NASLMINLEVEL...

Default Password (changemenow) for 'root' Account

The account 'root' on the remote host has the password 'changemenow'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Splunk virtual appliances are known to use these credentials to provide administrative access to the host. %NASLMINLEVEL 70300 ...

Cisco Ironport Appliances Privilege Escalation Exploit

Cisco Ironport appliances are vulnerable to authenticated "admin" privilege escalation. By enabling the Service Account from the GUI or CLI allows an admin to gain root access on the appliance, therefore bypassing all existing "admin" account limitations. The vulnerability is due to weak algorith...

CVE-2015-0924

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a 1 HTTP, 2 SSH, 3 TELNET, or 4 CLI session...

Default credentials

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a 1 HTTP, 2 SSH, 3 TELNET, or 4 CLI session...

CVE-2015-0924

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a 1 HTTP, 2 SSH, 3 TELNET, or 4 CLI session...

CVE-2015-0924

Ceragon FibeAir IP-10 bridges expose a default root password that can be exploited by remote attackers to gain administrative access via HTTP, SSH, TELNET, or CLI sessions. The issue stems from an embedded default password in affected devices, with multiple sources noting the risk and the need to...

CVE-2014-3692

CVE-2014-3692 affects Red Hat CloudForms 3.1 Management Engine (CFME) 5.3, where the customization template uses a default root password if none is specified for a newly created image, allowing a remote attacker to gain privileges. The connected RHSA-2015:0028 advisory documents the issue as part...

CVE-2014-3692

The customization template in Red Hat CloudForms 3.1 Management Engine CFME 5.3 uses a default password for the root account when a password is not specified for a new image, which allows remote attackers to gain privileges...

Ceragon FiberAir IP-10 Microwave Bridge contains a default root password

Overview Ceragon FiberAir IP-10 Microwave Bridge contains a default root password. Description CWE-255:Credentials Management Ceragon FiberAir IP-10 Microwave Bridges contain a default root password. The root account can be accessed through ssh, telnet, command line interface, or via HTTP. The...

OpenNMS Authenticated XXE

OpenNMS is vulnerable to XML External Entity Injection in the Real-Time Console interface. Although this attack requires authentication, there are several factors that increase the severity of this vulnerability. 1. OpenNMS runs with root privileges, taken from the OpenNMS FAQ: "The difficulty wi...

ARRIS Touchstone TG862G/CT Telephony Gateway Security Mechanism Bypass Vulnerability

The ARRIS Touchstone TG862G/CT Telephony Gateway is an all-in-one Modem modem router from the Arris Group of Companies. A security mechanism bypass vulnerability exists in ARRIS Touchstone TG862G/CT Telephony Gateway 7.6.59S.CT that allows remote attackers to obtain the default password for acces...

Default Password (centreon) for 'root' Account

The account 'root' on the remote host has the default password 'centreon'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Centreon Enterprise Server is known to use these credentials to provide complete, administrative access to the virtual...