Elastic · Report #1415241
Default password on 34.120.209.175
Validstatus
mediumseverity
13upvotes
18 Nov 2022disclosed
How it was found
There is a default password on 34.120.209.175, I can log in successfully.It has 500 Server Error, But we can confirm default password is vaild.
Summary:
The IP has a SSL certificate pointing to ElasticSearch. curl -kv https://34.120.209.175
Steps To Reproduce:
- access https://34.120.209.175/user/login,and log in with admin/admin
- it response the version of rundeck and error alert
- get Physical path and Class name.
Impact
Get the Default password.