EUVD-2015-4688

Malware in sbrugna...

Hardcoded credentials

Multiple hardcoded credentials in Xsuite 2.x...

Information disclosure

The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system...

CVE-2015-4667

CVE-2015-4667 affects Xceedium Xsuite 2.x (notably versions 2.3.0 and 2.4.3.0). The connected documents describe multiple hardcoded credentials vulnerabilities, including a hard-coded database password (n1b2dy) and broader issues in Xsuite 2.x that enable remote/ local access. Additional related ...