PT-2021-19428
CVE-2021-31579
·
Published
2021-06-15
·
Updated
2021-08-09
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Akkadian Provisioning Manager Engine (PME) versions prior to 5.0.2
Akkadian OVA appliance versions prior to 3.0
Akkadian Appliance Manager versions prior to 3.3.0.314-4a349e0
Description
The issue concerns a hard-coded credential, with the username
akkadianuser and password haakkadianpassword. This poses a significant security risk as it could allow unauthorized access.Recommendations
For Akkadian Provisioning Manager Engine (PME) versions prior to 5.0.2, update to version 5.0.2 or later.
For Akkadian OVA appliance versions prior to 3.0, update to version 3.0 or later.
For Akkadian Appliance Manager versions prior to 3.3.0.314-4a349e0, update to version 3.3.0.314-4a349e0 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾