default ████ creds on https://████████

How it was found

Description:

I can log into https://███ using █████ as credentials

Impact

Can do anything an ██████████ can do in this application, Server Now

Step-by-step Reproduction Instructions

1. go to https://███████
2. log in using ██████████

Suggested Mitigation/Remediation Actions

use proper authentication, this might be a test account but it should still not use ███ as the creds

Impact

logged in as ████ ██████ as shown in the screenshot