CVE-2020-25561

Name of the Vulnerable Software and Affected Versions: SapphireIMS version 5

Description: The issue concerns the use of default credentials in SapphireIMS. Specifically, the software utilizes default sapphire:ims credentials to connect the client to the server. These credentials are stored in the ServerConf.config file on the client side.

Recommendations: For SapphireIMS version 5, consider changing the default sapphire:ims credentials to custom, secure credentials to prevent unauthorized access. As a temporary workaround, restrict access to the ServerConf.config file to minimize the risk of exploitation.