CVE-2021-27437

Name of the Vulnerable Software and Affected Versions WISE-PaaS/RMM versions prior to 9.0.1

Description The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded administrator username and password that can be used to query Grafana APIs. Authentication is not required for exploitation.

Recommendations For versions prior to 9.0.1, update to version 9.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the Grafana APIs to minimize the risk of exploitation. Avoid using the hard-coded administrator username and password until the issue is resolved.