HexBrain

U.S. Dept Of Defense · Report #1839012

Authentication Bypass Using Default Credentials on █████

Validstatus
criticalseverity
14upvotes
24 Feb 2023disclosed

How it was found

Summary: I have found a vulnerability name authentication Bypass Using Default Credentials on admin console of █████████.

Impact

Access to the portal and the data in the portal like emails links data etc

System Host(s)

██████

Affected Product(s) and Version(s)

CVE Numbers

Steps to Reproduce

Steps:

  1. Go to ████████
  2. Then login with credentials username admin and password admin.

Suggested Mitigation/Remediation Actions

Change the credentials

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original