Trellix · Report #2160178
default credentials at https://52.42.105.71/
Validstatus
criticalseverity
77upvotes
1 Feb 2024disclosed
How it was found
Summary:
hi team i able to login in one of your servers by default credentials
Steps to reproduce:
1.go to link : https://52.42.105.71/ 1.enter this credentials
password=admin
username=admin
PoC
{F2703747}
{F2703748}
How to remediate the vulnerability
Change the password of the user or disable the account
Impact
the website was misconfigured in a manner that may have allowed a malicious user to login with administrator for the default organization account credentials.