PT-2020-12679 · Opsramp · Opsramp Gateway

Published 2020-04-07 · Updated 2020-07-27 · CVE-2020-11543

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpsRamp Gateway versions prior to 7.0.0

Description The issue concerns a backdoor account named vadmin with the password 9vt@f3Vt that allows root SSH access to the server. This account has been removed in the resolved version, where only an administrator and a system user account are available for the gateway appliance.

Recommendations For OpsRamp Gateway versions prior to 7.0.0, update to version 7.0.0 or later to resolve the issue, as this version removes the backdoor account and only allows access through an administrator and a system user account.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-11543

Affected Products

Opsramp Gateway

References · 5

• 🔥 https://criticalstart.com/hard-coded-administrator-password-discovered-in-opsramp · Exploit
• https://osv.dev/vulnerability/CVE-2020-11543 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11543 · Security Note
• https://t.me/cvenotify/2517 · Telegram Post
• https://docs.opsramp.com/about/release-notes/summer-2020-update/#simplified-gateway-appliance-accounts · Note