CVE-2018-17894

Name of the Vulnerable Software and Affected Versions NUUO CMS versions 3.1 and prior

Description The issue arises from the application creating default accounts with hard-coded passwords. This could allow an attacker to gain privileged access.

Recommendations For NUUO CMS versions 3.1 and prior, consider changing the default passwords of the hard-coded accounts to unique, strong passwords as a temporary mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.