PT-2007-6468 · Atlassian · Stride

Durito · Publicado 2007-10-12 · Atualizado 2018-10-15 · CVE-2007-5432

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Stride version 1.0

Description: The issue allows remote attackers to obtain administrative access due to a default administrator username and password. The default username is scott and the default password is running. This can be exploited through the "login.php" endpoint.

Recommendations: For Stride version 1.0, change the default administrator username and password to secure credentials as soon as possible to prevent unauthorized access. Consider temporarily restricting access to the "login.php" endpoint until the default credentials are changed.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-5432

Produtos afetados

Stride

Referências · 5

• http://securityfocus.com/archive/1/482006/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5432 · Nota de Segurança
• http://securityreason.com/securityalert/3216 · Nota
• http://osvdb.org/43485 · Nota
• http://securityvulns.ru/Sdocument4.html · Nota