PT-2021-19428 · Akkadian · Akkadian Provisioning Manager Engine+2

·

CVE-2021-31579

·

تاريخ النشر

2021-06-15

·

تاريخ التحديث

2021-08-09

CVSS v3.1

9.8

حرجة

المتجهAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Akkadian Provisioning Manager Engine (PME) versions prior to 5.0.2 Akkadian OVA appliance versions prior to 3.0 Akkadian Appliance Manager versions prior to 3.3.0.314-4a349e0
Description The issue concerns a hard-coded credential, with the username akkadianuser and password haakkadianpassword. This poses a significant security risk as it could allow unauthorized access.
Recommendations For Akkadian Provisioning Manager Engine (PME) versions prior to 5.0.2, update to version 5.0.2 or later. For Akkadian OVA appliance versions prior to 3.0, update to version 3.0 or later. For Akkadian Appliance Manager versions prior to 3.3.0.314-4a349e0, update to version 3.3.0.314-4a349e0 or later.

استغلال

إصلاح

Using Hardcoded Credentials

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

CVE-2021-31579

المنتجات المتأثرة

Akkadian Appliance Manager
Akkadian Ova Appliance
Akkadian Provisioning Manager Engine