CVE-2015-1842

The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors...

Default credentials

The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers to execute arbitrary shell commands via unspecified vectors...

CVE-2015-1842

CVE-2015-1842 relates to Red Hat OpenStack modules where the puppet manifests in the openstack-puppet-modules package were configured with a known default password for the pcsd daemon (CHANGEME). If this password is not changed and an attacker can access pcsd remotely, they could execute arbitrar...

PT-2015-1274 · Openstack · Openstack Puppet Module

Name of the Vulnerable Software and Affected Versions: openstack-puppet-modules versions prior to 2014.2.13-2 Description: The issue concerns the use of a default password 'CHANGEME' for the pcsd daemon in the openstack-puppet-modules package. This allows remote attackers to execute arbitrary she...

openstack-puppet-modules: pacemaker configured with default password

It was discovered that the puppet manifests, as provided with the openstack-puppet-modules package, would configure the pcsd daemon with a known default password. If this password was not changed and an attacker was able to gain access to pcsd, they could potentially run shell commands as root...

Important: Red Hat Security Advisory: openstack-packstack and openstack-puppet-modules security and bug fix update

Updated openstack-packstack and openstack-puppet-modules packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring...

Important: Red Hat Security Advisory: Red Hat Enterprise Linux OpenStack Platform Installer update

Updated Red Hat Enterprise Linux OpenStack Platform Installer packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability...

openstack-puppet-modules: pacemaker configured with default password

It was discovered that the puppet manifests, as provided with the openstack-puppet-modules package, would configure the pcsd daemon with a known default password. If this password was not changed and an attacker was able to gain access to pcsd, they could potentially run shell commands as root...

CVE-2015-0529

EMC PowerPath Virtual Appliance (vApp) prior to version 2.0 is vulnerable due to undocumented accounts emcupdate and svcuser protected by default passwords, enabling potential information disclosure via login sessions. Affected product/version: EMC PowerPath Virtual Appliance (vApp) before 2.0. R...

Visualware MyConnection Server Remote Agent Default Password

Binary data visualwaremyconnectionserverremoteagentdefaultpassword.nbin...

Default Password (123456) for 'nexthink' Account

The account 'nexthink' on the remote host has the password '123456'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Nexthink is known to use these credentials to provide administrative access to the host. %NASLMINLEVEL 70300 C Tenable Network...

Default Password Vulnerability in Youyou's Email System of Shenzhen Hechen Communication Technology Co.

Shenzhen Hechen Communication Technology Co., Ltd. Youyou mail system is a modern enterprise to set up a professional e-mail service of a set of overall solutions, the mail system not only provides the conventional e-mail functions, but also extends the e-mail monitoring, e-mail antivirus, e-mail...

Default Password (changeme) for 'splunkadmin' Account

The account 'splunkadmin' on the remote host has the password 'changeme'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Splunk virtual appliances are known to use these credentials to provide administrative access to the host. %NASLMINLEVEL...

Default Password (changemenow) for 'root' Account

The account 'root' on the remote host has the password 'changemenow'. An attacker can leverage this issue to gain administrative access to the affected system. Note that Splunk virtual appliances are known to use these credentials to provide administrative access to the host. %NASLMINLEVEL 70300 ...

Cisco Ironport Appliances Privilege Escalation Exploit

Cisco Ironport appliances are vulnerable to authenticated "admin" privilege escalation. By enabling the Service Account from the GUI or CLI allows an admin to gain root access on the appliance, therefore bypassing all existing "admin" account limitations. The vulnerability is due to weak algorith...

CVE-2015-0924

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a 1 HTTP, 2 SSH, 3 TELNET, or 4 CLI session...

Default credentials

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a 1 HTTP, 2 SSH, 3 TELNET, or 4 CLI session...

CVE-2015-0924

Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a 1 HTTP, 2 SSH, 3 TELNET, or 4 CLI session...

CVE-2015-0924

Ceragon FibeAir IP-10 bridges expose a default root password that can be exploited by remote attackers to gain administrative access via HTTP, SSH, TELNET, or CLI sessions. The issue stems from an embedded default password in affected devices, with multiple sources noting the risk and the need to...

CVE-2014-3692

CVE-2014-3692 affects Red Hat CloudForms 3.1 Management Engine (CFME) 5.3, where the customization template uses a default root password if none is specified for a newly created image, allowing a remote attacker to gain privileges. The connected RHSA-2015:0028 advisory documents the issue as part...