Scrutinizer Default Credentials Check

NASLDB: Scrutinizer Default Credentials Check

General

ID: 61597
Name: Scrutinizer Default Credentials Check

Summary: Tries to login using default credentials

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: CVSS2#E:H/RL:ND/RC:ND

Port: 80
Family: CGI abuses
Type: Remote

Description

The Scrutinizer install on the remote host is using default credentials
for the ‘admin’ user. Using these credentials, it is possible to login
and gain access to the back end administrative interface.

Exploiting

Exploit Available: True
Exploitability Ease: No exploit is required

Sources

CVE: –
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: –
Patch Release: –
Plugin Release: 2012/08/20

Plugin

Version: 1.1
Filename: scrutinizer_default_creds.nasl
Filesize: 3249 bytes
MD5 Hash: d469e08d8623dbf984a129236f071916

Identification: –
Require Keys: www/scrutinizer_netflow_sflow_analyzer
Dependencies: "scrutinizer_detect.nasl"

Letzte Plugins

Letzte Plugins

scip AG