CVE-2020-11543

Name of the Vulnerable Software and Affected Versions OpsRamp Gateway versions prior to 7.0.0

Description The issue concerns a backdoor account named vadmin with the password 9vt@f3Vt that allows root SSH access to the server. This account has been removed in the resolved version, where only an administrator and a system user account are available for the gateway appliance.

Recommendations For OpsRamp Gateway versions prior to 7.0.0, update to version 7.0.0 or later to resolve the issue, as this version removes the backdoor account and only allows access through an administrator and a system user account.