Insecure Defaults

2019-01-1509:01:57

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.027

Percentile

90.5%

JSON

openshift-origin-broker is vulnerable to insecure defaults. The vulnerability exists as it was discovered that openshift-origin-broker configured several default user names and passwords for services if no user name or password was specified during installation. A remote attacker could use these default user names and passwords to access various parts of the OpenShift Enterprise installation with the privileges of an administrative user.